Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-54534 (GCVE-0-2024-54534)
Vulnerability from cvelistv5 – Published: 2024-12-11 22:58 – Updated: 2026-04-02 18:23- Processing maliciously crafted web content may lead to memory corruption
- CWE-787 - Out-of-bounds Write
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | Safari |
Affected:
0 , < 18.2
(custom)
|
|
| Apple | iOS and iPadOS |
Affected:
0 , < 18.2
(custom)
|
|
| Apple | iPadOS |
Affected:
0 , < 17.7.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 15.2
(custom)
|
|
| Apple | tvOS |
Affected:
0 , < 18.2
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 2.2
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 11.2
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-54534",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-20T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-21T04:56:02.918Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-03T22:32:22.994Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://security.netapp.com/advisory/ntap-20250418-0002/"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Apr/5"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Dec/13"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Dec/11"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Dec/7"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Dec/5"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Safari",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "17.7.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "2.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "11.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing maliciously crafted web content may lead to memory corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-02T18:23:13.588Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/121837"
},
{
"url": "https://support.apple.com/en-us/121839"
},
{
"url": "https://support.apple.com/en-us/121843"
},
{
"url": "https://support.apple.com/en-us/121844"
},
{
"url": "https://support.apple.com/en-us/121845"
},
{
"url": "https://support.apple.com/en-us/121846"
},
{
"url": "https://support.apple.com/en-us/122372"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2024-54534",
"datePublished": "2024-12-11T22:58:39.974Z",
"dateReserved": "2024-12-03T22:50:35.511Z",
"dateUpdated": "2026-04-02T18:23:13.588Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2024-54534",
"date": "2026-06-02",
"epss": "0.01447",
"percentile": "0.81086"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"18.2\", \"matchCriteriaId\": \"12581F66-E5CF-4B04-A94C-E56DE31D0B62\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"18.2\", \"matchCriteriaId\": \"61B67D76-E2DA-46D7-9E43-4E18D542AA57\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"18.2\", \"matchCriteriaId\": \"02BF92BD-305C-46CA-8A77-C247AF8B1BC0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"15.2\", \"matchCriteriaId\": \"3750AD63-B023-44CE-B44D-A90F98E3A8C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"18.2\", \"matchCriteriaId\": \"3B719BB6-424F-4612-8809-0DF25022C29C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.2\", \"matchCriteriaId\": \"16F83EAF-2879-4515-BC44-6AE5006D35EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"11.2\", \"matchCriteriaId\": \"8C446885-2BC5-454D-88A1-146B17C051C3\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.\"}, {\"lang\": \"es\", \"value\": \"El problema se solucion\\u00f3 mejorando el manejo de la memoria. Este problema se solucion\\u00f3 en watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 y iPadOS 18.2. El procesamiento de contenido web creado con fines malintencionados puede provocar da\\u00f1os en la memoria.\"}]",
"id": "CVE-2024-54534",
"lastModified": "2024-12-13T19:15:09.890",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}]}",
"published": "2024-12-12T02:15:32.297",
"references": "[{\"url\": \"https://support.apple.com/en-us/121837\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121839\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121843\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121844\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121845\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121846\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "product-security@apple.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-54534\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2024-12-12T02:15:32.297\",\"lastModified\":\"2026-04-02T19:18:51.217\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.\"},{\"lang\":\"es\",\"value\":\"El problema se solucion\u00f3 mejorando el manejo de la memoria. Este problema se solucion\u00f3 en watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 y iPadOS 18.2. El procesamiento de contenido web creado con fines malintencionados puede provocar da\u00f1os en la memoria.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.2\",\"matchCriteriaId\":\"12581F66-E5CF-4B04-A94C-E56DE31D0B62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.2\",\"matchCriteriaId\":\"61B67D76-E2DA-46D7-9E43-4E18D542AA57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.2\",\"matchCriteriaId\":\"02BF92BD-305C-46CA-8A77-C247AF8B1BC0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"15.2\",\"matchCriteriaId\":\"3750AD63-B023-44CE-B44D-A90F98E3A8C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.2\",\"matchCriteriaId\":\"3B719BB6-424F-4612-8809-0DF25022C29C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.2\",\"matchCriteriaId\":\"16F83EAF-2879-4515-BC44-6AE5006D35EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.2\",\"matchCriteriaId\":\"8C446885-2BC5-454D-88A1-146B17C051C3\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/121837\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121839\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121843\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121844\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121845\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121846\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122372\",\"source\":\"product-security@apple.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2024/Dec/11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2024/Dec/13\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2024/Dec/5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2024/Dec/7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Apr/5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20250418-0002/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://security.netapp.com/advisory/ntap-20250418-0002/\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-04-19T00:11:06.867Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-54534\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-12-13T18:42:40.433481Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-12-13T18:43:20.247Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.2\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"2.2\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"15.2\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"11.2\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.2\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"Safari\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.2\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/121844\"}, {\"url\": \"https://support.apple.com/en-us/121845\"}, {\"url\": \"https://support.apple.com/en-us/121839\"}, {\"url\": \"https://support.apple.com/en-us/121843\"}, {\"url\": \"https://support.apple.com/en-us/121837\"}, {\"url\": \"https://support.apple.com/en-us/121846\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Processing maliciously crafted web content may lead to memory corruption\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2024-12-11T22:58:39.974Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-54534\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-04-19T00:11:06.867Z\", \"dateReserved\": \"2024-12-03T22:50:35.511Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2024-12-11T22:58:39.974Z\", \"assignerShortName\": \"apple\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2025-AVI-0969
Vulnerability from certfr_avis - Published: 2025-11-06 - Updated: 2025-11-06
De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | Tanzu Kubernetes Runtime | GenAI sur Tanzu Platform pour Cloud Foundry versions antérieures à 10.2.5 | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.90.x | ||
| VMware | Tanzu Kubernetes Runtime | NodeJS Buildpack versions antérieures à 1.8.58 | ||
| VMware | Tanzu Kubernetes Runtime | Python Buildpack versions antérieures à 1.8.63 | ||
| VMware | Tanzu Kubernetes Runtime | VMware Tanzu pour MySQL sur Tanzu Platform versions antérieures à 10.1.0 | ||
| VMware | Tanzu Kubernetes Runtime | API Gateway pour VMware Tanzu Platform versions antérieures à 2.4.0 | ||
| VMware | Tanzu Kubernetes Runtime | PHP Buildpack versions antérieures à 4.6.49 | ||
| VMware | Tanzu Kubernetes Runtime | Single Sign-On pour VMware Tanzu Platform versions antérieures à 1.16.14 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy FIPS) versions antérieures à 1.915.x | ||
| VMware | Tanzu Application Service | CredHub Service Broker versions antérieures à 1.6.6 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy FIPS) versions antérieures à 1.943.x | ||
| VMware | Tanzu Kubernetes Runtime | Elastic Application Runtime Windows add-on pour VMware Tanzu Platform versions antérieures à 10.2.4+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry Windows versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.915.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry Windows versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Single Sign-On pour VMware Tanzu Application Service versions antérieures à 1.16.13 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.943.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry isolation segment versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.77.x | ||
| VMware | Services Suite | Platform Automation Toolkit versions antérieures à 5.3.2 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy Azure Light) versions antérieures à 1.906.x | ||
| VMware | Tanzu Kubernetes Runtime | Spring Cloud Data Flow pour VMware Tanzu versions antérieures à 1.14.9 | ||
| VMware | Tanzu Kubernetes Runtime | App Autoscaler CLI Plugin pour VMware Tanzu Platform versions antérieures à 250.5.9 | ||
| VMware | Tanzu Kubernetes Runtime | Spring Cloud Services pour VMware Tanzu versions antérieures à 3.3.10 | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Concourse pour VMware Tanzu versions antérieures à 7.14.1+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry isolation segment versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Platform Services pour VMware Tanzu Platform versions antérieures à 10.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Ruby Buildpack versions antérieures à 1.10.46 | ||
| VMware | Tanzu Kubernetes Runtime | Elastic Application Runtime pour VMware Tanzu Platform versions antérieures à 6.0.21+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Telemetry pour VMware Tanzu Platform versions antérieures à 2.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.103.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Hub versions antérieures à 10.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.906.x |
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "GenAI sur Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 10.2.5",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.90.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "NodeJS Buildpack versions ant\u00e9rieures \u00e0 1.8.58",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Python Buildpack versions ant\u00e9rieures \u00e0 1.8.63",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware Tanzu pour MySQL sur Tanzu Platform versions ant\u00e9rieures \u00e0 10.1.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "API Gateway pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 2.4.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "PHP Buildpack versions ant\u00e9rieures \u00e0 4.6.49",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Single Sign-On pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 1.16.14",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy FIPS) versions ant\u00e9rieures \u00e0 1.915.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "CredHub Service Broker versions ant\u00e9rieures \u00e0 1.6.6",
"product": {
"name": "Tanzu Application Service",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy FIPS) versions ant\u00e9rieures \u00e0 1.943.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Elastic Application Runtime Windows add-on pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.2.4+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry Windows versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.915.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry Windows versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Single Sign-On pour VMware Tanzu Application Service versions ant\u00e9rieures \u00e0 1.16.13",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.943.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry isolation segment versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.77.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions ant\u00e9rieures \u00e0 5.3.2",
"product": {
"name": "Services Suite",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy Azure Light) versions ant\u00e9rieures \u00e0 1.906.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Spring Cloud Data Flow pour VMware Tanzu versions ant\u00e9rieures \u00e0 1.14.9",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "App Autoscaler CLI Plugin pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 250.5.9",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Spring Cloud Services pour VMware Tanzu versions ant\u00e9rieures \u00e0 3.3.10",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Concourse pour VMware Tanzu versions ant\u00e9rieures \u00e0 7.14.1+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry isolation segment versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Services pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Ruby Buildpack versions ant\u00e9rieures \u00e0 1.10.46",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Elastic Application Runtime pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 6.0.21+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Telemetry pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 2.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.103.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Hub versions ant\u00e9rieures \u00e0 10.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.906.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"name": "CVE-2017-9937",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9937"
},
{
"name": "CVE-2025-6395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6395"
},
{
"name": "CVE-2022-1343",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1343"
},
{
"name": "CVE-2013-4235",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4235"
},
{
"name": "CVE-2024-37370",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37370"
},
{
"name": "CVE-2024-24790",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24790"
},
{
"name": "CVE-2024-57981",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57981"
},
{
"name": "CVE-2025-8715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8715"
},
{
"name": "CVE-2017-3613",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3613"
},
{
"name": "CVE-2025-30681",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30681"
},
{
"name": "CVE-2022-25308",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25308"
},
{
"name": "CVE-2021-3996",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3996"
},
{
"name": "CVE-2024-38807",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38807"
},
{
"name": "CVE-2023-0216",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0216"
},
{
"name": "CVE-2023-27102",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27102"
},
{
"name": "CVE-2022-43236",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43236"
},
{
"name": "CVE-2024-20919",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20919"
},
{
"name": "CVE-2023-7104",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7104"
},
{
"name": "CVE-2022-35252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35252"
},
{
"name": "CVE-2005-0602",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-0602"
},
{
"name": "CVE-2017-6834",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6834"
},
{
"name": "CVE-2025-22003",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22003"
},
{
"name": "CVE-2022-1473",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1473"
},
{
"name": "CVE-2023-21938",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21938"
},
{
"name": "CVE-2023-3428",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3428"
},
{
"name": "CVE-2021-3933",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3933"
},
{
"name": "CVE-2022-32189",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32189"
},
{
"name": "CVE-2022-43237",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43237"
},
{
"name": "CVE-2021-23215",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23215"
},
{
"name": "CVE-2022-1115",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1115"
},
{
"name": "CVE-2024-57994",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57994"
},
{
"name": "CVE-2025-21798",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21798"
},
{
"name": "CVE-2025-3264",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3264"
},
{
"name": "CVE-2015-4789",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4789"
},
{
"name": "CVE-2025-53547",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53547"
},
{
"name": "CVE-2023-40217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40217"
},
{
"name": "CVE-2020-14621",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14621"
},
{
"name": "CVE-2025-26465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26465"
},
{
"name": "CVE-2025-21975",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21975"
},
{
"name": "CVE-2025-21980",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21980"
},
{
"name": "CVE-2023-0401",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0401"
},
{
"name": "CVE-2025-21889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21889"
},
{
"name": "CVE-2025-21861",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21861"
},
{
"name": "CVE-2025-38328",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38328"
},
{
"name": "CVE-2025-31115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31115"
},
{
"name": "CVE-2021-33294",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33294"
},
{
"name": "CVE-2023-3195",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3195"
},
{
"name": "CVE-2025-59830",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59830"
},
{
"name": "CVE-2023-21843",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21843"
},
{
"name": "CVE-2021-20243",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20243"
},
{
"name": "CVE-2023-3316",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3316"
},
{
"name": "CVE-2023-1175",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1175"
},
{
"name": "CVE-2024-57948",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57948"
},
{
"name": "CVE-2025-21937",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21937"
},
{
"name": "CVE-2014-9157",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9157"
},
{
"name": "CVE-2020-2803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2803"
},
{
"name": "CVE-2020-14803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14803"
},
{
"name": "CVE-2024-58088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58088"
},
{
"name": "CVE-2024-21235",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21235"
},
{
"name": "CVE-2025-53042",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53042"
},
{
"name": "CVE-2024-9681",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9681"
},
{
"name": "CVE-2021-37600",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37600"
},
{
"name": "CVE-2025-21689",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21689"
},
{
"name": "CVE-2025-21682",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21682"
},
{
"name": "CVE-2011-3374",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3374"
},
{
"name": "CVE-2025-30689",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30689"
},
{
"name": "CVE-2024-11168",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11168"
},
{
"name": "CVE-2021-26260",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26260"
},
{
"name": "CVE-2023-0922",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0922"
},
{
"name": "CVE-2025-38100",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38100"
},
{
"name": "CVE-2017-18250",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18250"
},
{
"name": "CVE-2025-9231",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9231"
},
{
"name": "CVE-2025-1372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1372"
},
{
"name": "CVE-2025-40002",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40002"
},
{
"name": "CVE-2022-21426",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21426"
},
{
"name": "CVE-2025-8851",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8851"
},
{
"name": "CVE-2024-58010",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58010"
},
{
"name": "CVE-2025-38043",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38043"
},
{
"name": "CVE-2025-21697",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21697"
},
{
"name": "CVE-2025-30715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30715"
},
{
"name": "CVE-2024-57973",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57973"
},
{
"name": "CVE-2022-24407",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24407"
},
{
"name": "CVE-2022-30631",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30631"
},
{
"name": "CVE-2022-46908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46908"
},
{
"name": "CVE-2022-3626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3626"
},
{
"name": "CVE-2024-28834",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28834"
},
{
"name": "CVE-2021-38604",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38604"
},
{
"name": "CVE-2001-1268",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1268"
},
{
"name": "CVE-2022-2874",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2874"
},
{
"name": "CVE-2025-22017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22017"
},
{
"name": "CVE-2025-38108",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38108"
},
{
"name": "CVE-2025-21783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21783"
},
{
"name": "CVE-2025-38229",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38229"
},
{
"name": "CVE-2023-46218",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
},
{
"name": "CVE-2021-3733",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3733"
},
{
"name": "CVE-2025-9714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9714"
},
{
"name": "CVE-2025-21786",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21786"
},
{
"name": "CVE-2024-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11187"
},
{
"name": "CVE-2020-27769",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27769"
},
{
"name": "CVE-2025-30682",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30682"
},
{
"name": "CVE-2021-35586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35586"
},
{
"name": "CVE-2014-9748",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9748"
},
{
"name": "CVE-2025-25186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25186"
},
{
"name": "CVE-2014-8141",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8141"
},
{
"name": "CVE-2022-1623",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1623"
},
{
"name": "CVE-2025-21881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21881"
},
{
"name": "CVE-2025-21951",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21951"
},
{
"name": "CVE-2024-38829",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38829"
},
{
"name": "CVE-2025-10148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10148"
},
{
"name": "CVE-2017-6831",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6831"
},
{
"name": "CVE-2024-58034",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58034"
},
{
"name": "CVE-2025-25724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25724"
},
{
"name": "CVE-2025-27818",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27818"
},
{
"name": "CVE-2021-3997",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3997"
},
{
"name": "CVE-2025-50102",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50102"
},
{
"name": "CVE-2023-38471",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38471"
},
{
"name": "CVE-2022-0158",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0158"
},
{
"name": "CVE-2020-27776",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27776"
},
{
"name": "CVE-2025-5222",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5222"
},
{
"name": "CVE-2025-21743",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21743"
},
{
"name": "CVE-2025-38147",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38147"
},
{
"name": "CVE-2023-6780",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6780"
},
{
"name": "CVE-2023-34475",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34475"
},
{
"name": "CVE-2024-26896",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26896"
},
{
"name": "CVE-2025-38286",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38286"
},
{
"name": "CVE-2025-55248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55248"
},
{
"name": "CVE-2024-24762",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24762"
},
{
"name": "CVE-2025-53643",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53643"
},
{
"name": "CVE-2022-0696",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0696"
},
{
"name": "CVE-2025-27516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27516"
},
{
"name": "CVE-2024-21144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21144"
},
{
"name": "CVE-2024-3220",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3220"
},
{
"name": "CVE-2022-3599",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3599"
},
{
"name": "CVE-2021-39537",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39537"
},
{
"name": "CVE-2025-12380",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12380"
},
{
"name": "CVE-2022-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42010"
},
{
"name": "CVE-2015-4787",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4787"
},
{
"name": "CVE-2021-35550",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35550"
},
{
"name": "CVE-2022-27781",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27781"
},
{
"name": "CVE-2025-21847",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21847"
},
{
"name": "CVE-2022-2929",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2929"
},
{
"name": "CVE-2018-15120",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15120"
},
{
"name": "CVE-2024-58069",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58069"
},
{
"name": "CVE-2025-8556",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8556"
},
{
"name": "CVE-2023-0796",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0796"
},
{
"name": "CVE-2025-21853",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21853"
},
{
"name": "CVE-2025-21871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21871"
},
{
"name": "CVE-2023-51385",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51385"
},
{
"name": "CVE-2016-0682",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0682"
},
{
"name": "CVE-2025-4287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4287"
},
{
"name": "CVE-2024-43788",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43788"
},
{
"name": "CVE-2025-21731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21731"
},
{
"name": "CVE-2023-48237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48237"
},
{
"name": "CVE-2023-48706",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48706"
},
{
"name": "CVE-2021-3605",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3605"
},
{
"name": "CVE-2025-38515",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38515"
},
{
"name": "CVE-2025-22872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
},
{
"name": "CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"name": "CVE-2025-21941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21941"
},
{
"name": "CVE-2025-8277",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8277"
},
{
"name": "CVE-2025-8941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8941"
},
{
"name": "CVE-2017-10928",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10928"
},
{
"name": "CVE-2023-52425",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52425"
},
{
"name": "CVE-2025-38163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38163"
},
{
"name": "CVE-2021-35567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35567"
},
{
"name": "CVE-2017-12429",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12429"
},
{
"name": "CVE-2025-38444",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38444"
},
{
"name": "CVE-2023-38546",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
},
{
"name": "CVE-2019-8322",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8322"
},
{
"name": "CVE-2024-52615",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52615"
},
{
"name": "CVE-2020-14579",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14579"
},
{
"name": "CVE-2023-2157",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2157"
},
{
"name": "CVE-2025-32386",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32386"
},
{
"name": "CVE-2025-21823",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21823"
},
{
"name": "CVE-2025-11731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11731"
},
{
"name": "CVE-2019-1010238",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1010238"
},
{
"name": "CVE-2024-26700",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26700"
},
{
"name": "CVE-2024-58082",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58082"
},
{
"name": "CVE-2024-35176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35176"
},
{
"name": "CVE-2024-33602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33602"
},
{
"name": "CVE-2025-55551",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55551"
},
{
"name": "CVE-2025-50100",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50100"
},
{
"name": "CVE-2023-29404",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29404"
},
{
"name": "CVE-2025-21763",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21763"
},
{
"name": "CVE-2023-21954",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21954"
},
{
"name": "CVE-2025-40780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40780"
},
{
"name": "CVE-2023-48368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48368"
},
{
"name": "CVE-2014-4715",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4715"
},
{
"name": "CVE-2022-4304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4304"
},
{
"name": "CVE-2023-21939",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21939"
},
{
"name": "CVE-2022-48554",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48554"
},
{
"name": "CVE-2022-0563",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0563"
},
{
"name": "CVE-2025-38157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38157"
},
{
"name": "CVE-2023-24757",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24757"
},
{
"name": "CVE-2024-20926",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20926"
},
{
"name": "CVE-2025-21678",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21678"
},
{
"name": "CVE-2025-4056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4056"
},
{
"name": "CVE-2024-28757",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28757"
},
{
"name": "CVE-2020-29562",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29562"
},
{
"name": "CVE-2022-31683",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31683"
},
{
"name": "CVE-2020-22218",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-22218"
},
{
"name": "CVE-2025-0913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0913"
},
{
"name": "CVE-2025-53062",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53062"
},
{
"name": "CVE-2015-4776",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4776"
},
{
"name": "CVE-2025-21872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21872"
},
{
"name": "CVE-2017-3616",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3616"
},
{
"name": "CVE-2021-2163",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2163"
},
{
"name": "CVE-2025-21922",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21922"
},
{
"name": "CVE-2025-27817",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27817"
},
{
"name": "CVE-2023-30086",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30086"
},
{
"name": "CVE-2017-6832",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6832"
},
{
"name": "CVE-2022-2208",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2208"
},
{
"name": "CVE-2024-45720",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45720"
},
{
"name": "CVE-2022-1056",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1056"
},
{
"name": "CVE-2018-10805",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10805"
},
{
"name": "CVE-2019-19906",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19906"
},
{
"name": "CVE-2025-38219",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38219"
},
{
"name": "CVE-2015-4785",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4785"
},
{
"name": "CVE-2025-38466",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38466"
},
{
"name": "CVE-2022-24921",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24921"
},
{
"name": "CVE-2022-32208",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32208"
},
{
"name": "CVE-2020-15095",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15095"
},
{
"name": "CVE-2018-16328",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16328"
},
{
"name": "CVE-2024-38949",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38949"
},
{
"name": "CVE-2022-28327",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28327"
},
{
"name": "CVE-2025-5745",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5745"
},
{
"name": "CVE-2025-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
},
{
"name": "CVE-2022-43239",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43239"
},
{
"name": "CVE-2022-41409",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41409"
},
{
"name": "CVE-2022-32546",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32546"
},
{
"name": "CVE-2025-0838",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0838"
},
{
"name": "CVE-2024-57980",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57980"
},
{
"name": "CVE-2023-5441",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5441"
},
{
"name": "CVE-2025-55553",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55553"
},
{
"name": "CVE-2024-12797",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12797"
},
{
"name": "CVE-2024-58011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58011"
},
{
"name": "CVE-2025-21796",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21796"
},
{
"name": "CVE-2024-12086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12086"
},
{
"name": "CVE-2025-27219",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27219"
},
{
"name": "CVE-2025-21691",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21691"
},
{
"name": "CVE-2021-4219",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4219"
},
{
"name": "CVE-2018-15798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15798"
},
{
"name": "CVE-2025-55154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55154"
},
{
"name": "CVE-2025-49146",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49146"
},
{
"name": "CVE-2025-40026",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40026"
},
{
"name": "CVE-2022-1292",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1292"
},
{
"name": "CVE-2022-3153",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3153"
},
{
"name": "CVE-2022-2057",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2057"
},
{
"name": "CVE-2025-5197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5197"
},
{
"name": "CVE-2023-45283",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45283"
},
{
"name": "CVE-2023-39328",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39328"
},
{
"name": "CVE-2023-45853",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45853"
},
{
"name": "CVE-2024-47611",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47611"
},
{
"name": "CVE-2017-11447",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11447"
},
{
"name": "CVE-2019-8323",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8323"
},
{
"name": "CVE-2023-39593",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39593"
},
{
"name": "CVE-2025-45582",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-45582"
},
{
"name": "CVE-2025-46569",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46569"
},
{
"name": "CVE-2024-21068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21068"
},
{
"name": "CVE-2018-14434",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14434"
},
{
"name": "CVE-2019-6293",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6293"
},
{
"name": "CVE-2025-30703",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30703"
},
{
"name": "CVE-2025-21738",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21738"
},
{
"name": "CVE-2022-48522",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48522"
},
{
"name": "CVE-2025-21684",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21684"
},
{
"name": "CVE-2023-50868",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50868"
},
{
"name": "CVE-2023-45288",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45288"
},
{
"name": "CVE-2023-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21830"
},
{
"name": "CVE-2023-26965",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26965"
},
{
"name": "CVE-2023-2602",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2602"
},
{
"name": "CVE-2021-2161",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2161"
},
{
"name": "CVE-2025-6069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
},
{
"name": "CVE-2023-3817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3817"
},
{
"name": "CVE-2017-10140",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10140"
},
{
"name": "CVE-2021-2341",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2341"
},
{
"name": "CVE-2021-3468",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3468"
},
{
"name": "CVE-2024-6232",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6232"
},
{
"name": "CVE-2024-58061",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58061"
},
{
"name": "CVE-2025-46148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46148"
},
{
"name": "CVE-2024-58058",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58058"
},
{
"name": "CVE-2025-21768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21768"
},
{
"name": "CVE-2025-21864",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21864"
},
{
"name": "CVE-2025-2149",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2149"
},
{
"name": "CVE-2021-3502",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3502"
},
{
"name": "CVE-2025-6052",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6052"
},
{
"name": "CVE-2018-16329",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16329"
},
{
"name": "CVE-2022-41725",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41725"
},
{
"name": "CVE-2025-24813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24813"
},
{
"name": "CVE-2024-58056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58056"
},
{
"name": "CVE-2023-52426",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52426"
},
{
"name": "CVE-2025-50080",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50080"
},
{
"name": "CVE-2025-21725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21725"
},
{
"name": "CVE-2024-43790",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43790"
},
{
"name": "CVE-2025-38313",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38313"
},
{
"name": "CVE-2025-38336",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38336"
},
{
"name": "CVE-2022-2058",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2058"
},
{
"name": "CVE-2025-22009",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22009"
},
{
"name": "CVE-2025-38061",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38061"
},
{
"name": "CVE-2022-45061",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-45061"
},
{
"name": "CVE-2025-21727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21727"
},
{
"name": "CVE-2024-45492",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45492"
},
{
"name": "CVE-2015-4764",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4764"
},
{
"name": "CVE-2025-22228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22228"
},
{
"name": "CVE-2022-43240",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43240"
},
{
"name": "CVE-2020-1752",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1752"
},
{
"name": "CVE-2025-5987",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
},
{
"name": "CVE-2023-4091",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4091"
},
{
"name": "CVE-2022-30635",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30635"
},
{
"name": "CVE-2025-38375",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38375"
},
{
"name": "CVE-2015-4779",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4779"
},
{
"name": "CVE-2021-20312",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20312"
},
{
"name": "CVE-2025-4330",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4330"
},
{
"name": "CVE-2025-2953",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2953"
},
{
"name": "CVE-2020-14593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14593"
},
{
"name": "CVE-2025-21904",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21904"
},
{
"name": "CVE-2019-20838",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20838"
},
{
"name": "CVE-2025-37798",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37798"
},
{
"name": "CVE-2022-41715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41715"
},
{
"name": "CVE-2025-50078",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50078"
},
{
"name": "CVE-2022-28739",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28739"
},
{
"name": "CVE-2024-26726",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26726"
},
{
"name": "CVE-2023-52593",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52593"
},
{
"name": "CVE-2025-3933",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3933"
},
{
"name": "CVE-2023-26785",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26785"
},
{
"name": "CVE-2025-49794",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49794"
},
{
"name": "CVE-2020-14664",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14664"
},
{
"name": "CVE-2023-48235",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48235"
},
{
"name": "CVE-2024-57970",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57970"
},
{
"name": "CVE-2024-9287",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9287"
},
{
"name": "CVE-2025-21668",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21668"
},
{
"name": "CVE-2025-22004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22004"
},
{
"name": "CVE-2022-32207",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32207"
},
{
"name": "CVE-2024-44939",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44939"
},
{
"name": "CVE-2024-43374",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43374"
},
{
"name": "CVE-2023-50782",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50782"
},
{
"name": "CVE-2025-21929",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21929"
},
{
"name": "CVE-2025-4138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4138"
},
{
"name": "CVE-2022-41722",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41722"
},
{
"name": "CVE-2022-3627",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3627"
},
{
"name": "CVE-2020-14797",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14797"
},
{
"name": "CVE-2025-21735",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21735"
},
{
"name": "CVE-2024-3596",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3596"
},
{
"name": "CVE-2023-0215",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0215"
},
{
"name": "CVE-2024-27280",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27280"
},
{
"name": "CVE-2025-3000",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3000"
},
{
"name": "CVE-2022-3213",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3213"
},
{
"name": "CVE-2022-2867",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2867"
},
{
"name": "CVE-2023-36632",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36632"
},
{
"name": "CVE-2021-23177",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23177"
},
{
"name": "CVE-2020-14798",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14798"
},
{
"name": "CVE-2007-4559",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4559"
},
{
"name": "CVE-2025-21839",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21839"
},
{
"name": "CVE-2025-38112",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38112"
},
{
"name": "CVE-2025-5878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5878"
},
{
"name": "CVE-2023-0286",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
},
{
"name": "CVE-2022-3715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3715"
},
{
"name": "CVE-2023-4016",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4016"
},
{
"name": "CVE-2024-58063",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58063"
},
{
"name": "CVE-2015-4780",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4780"
},
{
"name": "CVE-2024-41957",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41957"
},
{
"name": "CVE-2025-38500",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38500"
},
{
"name": "CVE-2024-56171",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56171"
},
{
"name": "CVE-2025-24293",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24293"
},
{
"name": "CVE-2025-8961",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8961"
},
{
"name": "CVE-2025-21977",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21977"
},
{
"name": "CVE-2022-25147",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25147"
},
{
"name": "CVE-2025-21779",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21779"
},
{
"name": "CVE-2024-58005",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58005"
},
{
"name": "CVE-2025-21674",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21674"
},
{
"name": "CVE-2022-3598",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3598"
},
{
"name": "CVE-2025-30696",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30696"
},
{
"name": "CVE-2023-0798",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0798"
},
{
"name": "CVE-2025-21918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21918"
},
{
"name": "CVE-2025-38203",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38203"
},
{
"name": "CVE-2023-45285",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45285"
},
{
"name": "CVE-2022-0909",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0909"
},
{
"name": "CVE-2025-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8176"
},
{
"name": "CVE-2023-28154",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28154"
},
{
"name": "CVE-2023-48231",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48231"
},
{
"name": "CVE-2025-55752",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
},
{
"name": "CVE-2023-38633",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38633"
},
{
"name": "CVE-2025-21948",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21948"
},
{
"name": "CVE-2023-2609",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2609"
},
{
"name": "CVE-2025-53905",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53905"
},
{
"name": "CVE-2025-24970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24970"
},
{
"name": "CVE-2021-46312",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46312"
},
{
"name": "CVE-2018-14628",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14628"
},
{
"name": "CVE-2022-21299",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21299"
},
{
"name": "CVE-2022-38476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38476"
},
{
"name": "CVE-2019-6461",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6461"
},
{
"name": "CVE-2022-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3515"
},
{
"name": "CVE-2025-38004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38004"
},
{
"name": "CVE-2020-2773",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2773"
},
{
"name": "CVE-2015-5262",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5262"
},
{
"name": "CVE-2022-43244",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43244"
},
{
"name": "CVE-2024-24783",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24783"
},
{
"name": "CVE-2025-21753",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21753"
},
{
"name": "CVE-2017-6004",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6004"
},
{
"name": "CVE-2023-45284",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45284"
},
{
"name": "CVE-2015-7696",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7696"
},
{
"name": "CVE-2023-29403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29403"
},
{
"name": "CVE-2025-38387",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38387"
},
{
"name": "CVE-2023-45922",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45922"
},
{
"name": "CVE-2015-4754",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4754"
},
{
"name": "CVE-2025-21699",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21699"
},
{
"name": "CVE-2025-38362",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38362"
},
{
"name": "CVE-2022-27776",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27776"
},
{
"name": "CVE-2023-45322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45322"
},
{
"name": "CVE-2024-24791",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
},
{
"name": "CVE-2024-20921",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20921"
},
{
"name": "CVE-2022-39046",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39046"
},
{
"name": "CVE-2020-14578",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14578"
},
{
"name": "CVE-2025-21584",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21584"
},
{
"name": "CVE-2022-42916",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42916"
},
{
"name": "CVE-2025-40004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40004"
},
{
"name": "CVE-2017-7619",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7619"
},
{
"name": "CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"name": "CVE-2020-2805",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2805"
},
{
"name": "CVE-2025-21712",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21712"
},
{
"name": "CVE-2025-38371",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38371"
},
{
"name": "CVE-2023-2731",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2731"
},
{
"name": "CVE-2025-58767",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58767"
},
{
"name": "CVE-2021-35939",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35939"
},
{
"name": "CVE-2024-57982",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57982"
},
{
"name": "CVE-2025-38445",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38445"
},
{
"name": "CVE-2024-38819",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38819"
},
{
"name": "CVE-2023-0803",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0803"
},
{
"name": "CVE-2023-4807",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
},
{
"name": "CVE-2025-21746",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21746"
},
{
"name": "CVE-2022-0391",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0391"
},
{
"name": "CVE-2023-1170",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1170"
},
{
"name": "CVE-2022-24070",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24070"
},
{
"name": "CVE-2025-38461",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38461"
},
{
"name": "CVE-2019-17547",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17547"
},
{
"name": "CVE-2024-45341",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45341"
},
{
"name": "CVE-2021-36411",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36411"
},
{
"name": "CVE-2023-30774",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30774"
},
{
"name": "CVE-2018-10919",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10919"
},
{
"name": "CVE-2024-13176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13176"
},
{
"name": "CVE-2020-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2830"
},
{
"name": "CVE-2025-53014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53014"
},
{
"name": "CVE-2025-7962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7962"
},
{
"name": "CVE-2022-21624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21624"
},
{
"name": "CVE-2020-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2781"
},
{
"name": "CVE-2023-28322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
},
{
"name": "CVE-2018-10804",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10804"
},
{
"name": "CVE-2025-38159",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38159"
},
{
"name": "CVE-2022-0907",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0907"
},
{
"name": "CVE-2021-3421",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3421"
},
{
"name": "CVE-2022-21305",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21305"
},
{
"name": "CVE-2025-38066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38066"
},
{
"name": "CVE-2023-29405",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29405"
},
{
"name": "CVE-2021-3670",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3670"
},
{
"name": "CVE-2021-38297",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38297"
},
{
"name": "CVE-2025-4373",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4373"
},
{
"name": "CVE-2015-4790",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4790"
},
{
"name": "CVE-2025-4598",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4598"
},
{
"name": "CVE-2025-27144",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27144"
},
{
"name": "CVE-2025-21836",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21836"
},
{
"name": "CVE-2025-21715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21715"
},
{
"name": "CVE-2024-6174",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6174"
},
{
"name": "CVE-2022-30629",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30629"
},
{
"name": "CVE-2020-10735",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10735"
},
{
"name": "CVE-2025-38305",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38305"
},
{
"name": "CVE-2020-14556",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14556"
},
{
"name": "CVE-2025-38067",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38067"
},
{
"name": "CVE-2025-50085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50085"
},
{
"name": "CVE-2025-21781",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21781"
},
{
"name": "CVE-2024-58054",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58054"
},
{
"name": "CVE-2024-43398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43398"
},
{
"name": "CVE-2020-14792",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14792"
},
{
"name": "CVE-2019-16776",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16776"
},
{
"name": "CVE-2023-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
},
{
"name": "CVE-2024-29857",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29857"
},
{
"name": "CVE-2023-6779",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6779"
},
{
"name": "CVE-2022-28738",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28738"
},
{
"name": "CVE-2023-5363",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5363"
},
{
"name": "CVE-2024-8508",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8508"
},
{
"name": "CVE-2023-45289",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45289"
},
{
"name": "CVE-2025-41248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41248"
},
{
"name": "CVE-2022-49043",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49043"
},
{
"name": "CVE-2015-2624",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2624"
},
{
"name": "CVE-2022-2068",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2068"
},
{
"name": "CVE-2025-40364",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40364"
},
{
"name": "CVE-2023-29491",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29491"
},
{
"name": "CVE-2025-38068",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38068"
},
{
"name": "CVE-2025-61985",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61985"
},
{
"name": "CVE-2013-2064",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2064"
},
{
"name": "CVE-2025-38401",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38401"
},
{
"name": "CVE-2025-21772",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21772"
},
{
"name": "CVE-2021-20266",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20266"
},
{
"name": "CVE-2022-21271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21271"
},
{
"name": "CVE-2024-58070",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58070"
},
{
"name": "CVE-2025-61919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61919"
},
{
"name": "CVE-2023-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25193"
},
{
"name": "CVE-2024-34447",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34447"
},
{
"name": "CVE-2020-25663",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25663"
},
{
"name": "CVE-2022-0156",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0156"
},
{
"name": "CVE-2025-21914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21914"
},
{
"name": "CVE-2024-58057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58057"
},
{
"name": "CVE-2025-0306",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0306"
},
{
"name": "CVE-2025-1371",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1371"
},
{
"name": "CVE-2024-12798",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12798"
},
{
"name": "CVE-2022-40897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40897"
},
{
"name": "CVE-2024-58007",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58007"
},
{
"name": "CVE-2023-1355",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1355"
},
{
"name": "CVE-2025-21995",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21995"
},
{
"name": "CVE-2023-0466",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0466"
},
{
"name": "CVE-2025-21868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21868"
},
{
"name": "CVE-2025-0938",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0938"
},
{
"name": "CVE-2025-5372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5372"
},
{
"name": "CVE-2022-27782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27782"
},
{
"name": "CVE-2022-37967",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37967"
},
{
"name": "CVE-2022-22844",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22844"
},
{
"name": "CVE-2025-21915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21915"
},
{
"name": "CVE-2019-13232",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13232"
},
{
"name": "CVE-2025-27210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27210"
},
{
"name": "CVE-2025-38102",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38102"
},
{
"name": "CVE-2024-33600",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33600"
},
{
"name": "CVE-2025-21792",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21792"
},
{
"name": "CVE-2015-2654",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2654"
},
{
"name": "CVE-2025-55560",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55560"
},
{
"name": "CVE-2025-21728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21728"
},
{
"name": "CVE-2024-58018",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58018"
},
{
"name": "CVE-2023-42669",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42669"
},
{
"name": "CVE-2022-1210",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1210"
},
{
"name": "CVE-2025-61771",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61771"
},
{
"name": "CVE-2023-0465",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0465"
},
{
"name": "CVE-2025-61770",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61770"
},
{
"name": "CVE-2022-32148",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32148"
},
{
"name": "CVE-2023-22081",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
},
{
"name": "CVE-2015-4778",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4778"
},
{
"name": "CVE-2023-42670",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42670"
},
{
"name": "CVE-2022-4203",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4203"
},
{
"name": "CVE-2024-58090",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58090"
},
{
"name": "CVE-2025-59842",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59842"
},
{
"name": "CVE-2025-49125",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49125"
},
{
"name": "CVE-2025-50106",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
},
{
"name": "CVE-2024-27766",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27766"
},
{
"name": "CVE-2025-37958",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37958"
},
{
"name": "CVE-2025-21714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21714"
},
{
"name": "CVE-2024-58078",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58078"
},
{
"name": "CVE-2023-32636",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32636"
},
{
"name": "CVE-2023-6277",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6277"
},
{
"name": "CVE-2025-48060",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48060"
},
{
"name": "CVE-2025-21855",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21855"
},
{
"name": "CVE-2025-38399",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38399"
},
{
"name": "CVE-2025-21972",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21972"
},
{
"name": "CVE-2025-38065",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38065"
},
{
"name": "CVE-2025-38459",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38459"
},
{
"name": "CVE-2024-21510",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21510"
},
{
"name": "CVE-2023-34153",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34153"
},
{
"name": "CVE-2023-3618",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3618"
},
{
"name": "CVE-2020-14153",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14153"
},
{
"name": "CVE-2022-1114",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1114"
},
{
"name": "CVE-2023-48233",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48233"
},
{
"name": "CVE-2025-38412",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38412"
},
{
"name": "CVE-2025-38031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38031"
},
{
"name": "CVE-2023-4813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4813"
},
{
"name": "CVE-2022-21626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21626"
},
{
"name": "CVE-2011-2207",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2207"
},
{
"name": "CVE-2025-54874",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54874"
},
{
"name": "CVE-2017-3617",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3617"
},
{
"name": "CVE-2024-53124",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53124"
},
{
"name": "CVE-2025-38293",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38293"
},
{
"name": "CVE-2025-58057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58057"
},
{
"name": "CVE-2025-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21830"
},
{
"name": "CVE-2018-12600",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12600"
},
{
"name": "CVE-2025-4877",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4877"
},
{
"name": "CVE-2021-41771",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41771"
},
{
"name": "CVE-2025-8291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8291"
},
{
"name": "CVE-2020-14781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14781"
},
{
"name": "CVE-2016-3189",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3189"
},
{
"name": "CVE-2023-4154",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4154"
},
{
"name": "CVE-2025-38184",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38184"
},
{
"name": "CVE-2017-3615",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3615"
},
{
"name": "CVE-2022-0714",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0714"
},
{
"name": "CVE-2023-45290",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45290"
},
{
"name": "CVE-2023-28320",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28320"
},
{
"name": "CVE-2025-9340",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9340"
},
{
"name": "CVE-2023-24758",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24758"
},
{
"name": "CVE-2025-55552",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55552"
},
{
"name": "CVE-2025-30683",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30683"
},
{
"name": "CVE-2025-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30699"
},
{
"name": "CVE-2025-61921",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61921"
},
{
"name": "CVE-2024-4030",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4030"
},
{
"name": "CVE-2025-27587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27587"
},
{
"name": "CVE-2016-7531",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7531"
},
{
"name": "CVE-2006-3082",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3082"
},
{
"name": "CVE-2023-5341",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5341"
},
{
"name": "CVE-2025-8534",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8534"
},
{
"name": "CVE-2025-21767",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21767"
},
{
"name": "CVE-2025-3262",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3262"
},
{
"name": "CVE-2025-21986",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21986"
},
{
"name": "CVE-2025-22866",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22866"
},
{
"name": "CVE-2025-1390",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1390"
},
{
"name": "CVE-2024-33599",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33599"
},
{
"name": "CVE-2023-34968",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34968"
},
{
"name": "CVE-2024-0743",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0743"
},
{
"name": "CVE-2025-21961",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21961"
},
{
"name": "CVE-2025-38458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38458"
},
{
"name": "CVE-2025-6297",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6297"
},
{
"name": "CVE-2016-10062",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10062"
},
{
"name": "CVE-2025-21764",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21764"
},
{
"name": "CVE-2024-57974",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57974"
},
{
"name": "CVE-2024-58093",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58093"
},
{
"name": "CVE-2023-34152",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34152"
},
{
"name": "CVE-2022-43249",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43249"
},
{
"name": "CVE-2025-38034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38034"
},
{
"name": "CVE-2024-58085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58085"
},
{
"name": "CVE-2024-34158",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34158"
},
{
"name": "CVE-2017-3608",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3608"
},
{
"name": "CVE-2025-47268",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47268"
},
{
"name": "CVE-2025-21690",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21690"
},
{
"name": "CVE-2025-30754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
},
{
"name": "CVE-2024-57996",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57996"
},
{
"name": "CVE-2025-38135",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38135"
},
{
"name": "CVE-2023-28484",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28484"
},
{
"name": "CVE-2022-43242",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43242"
},
{
"name": "CVE-2019-2708",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2708"
},
{
"name": "CVE-2025-38312",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38312"
},
{
"name": "CVE-2016-0692",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0692"
},
{
"name": "CVE-2019-14844",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14844"
},
{
"name": "CVE-2022-21366",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21366"
},
{
"name": "CVE-2022-30630",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30630"
},
{
"name": "CVE-2025-22233",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22233"
},
{
"name": "CVE-2025-38464",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38464"
},
{
"name": "CVE-2025-21946",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21946"
},
{
"name": "CVE-2025-21838",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21838"
},
{
"name": "CVE-2025-21982",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21982"
},
{
"name": "CVE-2025-21867",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21867"
},
{
"name": "CVE-2025-21666",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21666"
},
{
"name": "CVE-2023-0802",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0802"
},
{
"name": "CVE-2025-53859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53859"
},
{
"name": "CVE-2023-46219",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46219"
},
{
"name": "CVE-2025-47910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47910"
},
{
"name": "CVE-2025-21828",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21828"
},
{
"name": "CVE-2023-47038",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47038"
},
{
"name": "CVE-2025-23167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23167"
},
{
"name": "CVE-2025-38363",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38363"
},
{
"name": "CVE-2025-21704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21704"
},
{
"name": "CVE-2025-21936",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21936"
},
{
"name": "CVE-2022-0865",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0865"
},
{
"name": "CVE-2023-5981",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5981"
},
{
"name": "CVE-2025-38319",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38319"
},
{
"name": "CVE-2025-43859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43859"
},
{
"name": "CVE-2024-58013",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58013"
},
{
"name": "CVE-2022-0529",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0529"
},
{
"name": "CVE-2023-27043",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27043"
},
{
"name": "CVE-2016-7514",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7514"
},
{
"name": "CVE-2015-4782",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4782"
},
{
"name": "CVE-2025-21909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21909"
},
{
"name": "CVE-2022-2056",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2056"
},
{
"name": "CVE-2025-9092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9092"
},
{
"name": "CVE-2025-21766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21766"
},
{
"name": "CVE-2025-38457",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38457"
},
{
"name": "CVE-2024-54677",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54677"
},
{
"name": "CVE-2021-3598",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3598"
},
{
"name": "CVE-2025-21880",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21880"
},
{
"name": "CVE-2025-50094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50094"
},
{
"name": "CVE-2021-35559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35559"
},
{
"name": "CVE-2025-21959",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21959"
},
{
"name": "CVE-2024-38809",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38809"
},
{
"name": "CVE-2025-38212",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38212"
},
{
"name": "CVE-2017-3610",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3610"
},
{
"name": "CVE-2023-1264",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1264"
},
{
"name": "CVE-2023-0217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0217"
},
{
"name": "CVE-2024-58266",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58266"
},
{
"name": "CVE-2025-38298",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38298"
},
{
"name": "CVE-2024-30172",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30172"
},
{
"name": "CVE-2025-50098",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50098"
},
{
"name": "CVE-2022-43552",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43552"
},
{
"name": "CVE-2018-1000076",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000076"
},
{
"name": "CVE-2022-4293",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4293"
},
{
"name": "CVE-2025-37974",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37974"
},
{
"name": "CVE-2025-5915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5915"
},
{
"name": "CVE-2024-57834",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57834"
},
{
"name": "CVE-2025-55197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55197"
},
{
"name": "CVE-2022-32743",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32743"
},
{
"name": "CVE-2025-55558",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55558"
},
{
"name": "CVE-2022-21291",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21291"
},
{
"name": "CVE-2024-58017",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58017"
},
{
"name": "CVE-2025-5917",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5917"
},
{
"name": "CVE-2025-26603",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26603"
},
{
"name": "CVE-2023-35116",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35116"
},
{
"name": "CVE-2025-38078",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38078"
},
{
"name": "CVE-2025-21809",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21809"
},
{
"name": "CVE-2025-38419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38419"
},
{
"name": "CVE-2024-45490",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45490"
},
{
"name": "CVE-2021-32490",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32490"
},
{
"name": "CVE-2020-27768",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27768"
},
{
"name": "CVE-2024-38820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38820"
},
{
"name": "CVE-2025-50086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50086"
},
{
"name": "CVE-2016-5118",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5118"
},
{
"name": "CVE-2022-3786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3786"
},
{
"name": "CVE-2023-46045",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46045"
},
{
"name": "CVE-2025-37889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37889"
},
{
"name": "CVE-2021-3995",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3995"
},
{
"name": "CVE-2015-4788",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4788"
},
{
"name": "CVE-2025-55557",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55557"
},
{
"name": "CVE-2024-12085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12085"
},
{
"name": "CVE-2022-24599",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24599"
},
{
"name": "CVE-2025-21981",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21981"
},
{
"name": "CVE-2025-38211",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38211"
},
{
"name": "CVE-2025-2999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2999"
},
{
"name": "CVE-2023-48795",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48795"
},
{
"name": "CVE-2025-21910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21910"
},
{
"name": "CVE-2021-35452",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35452"
},
{
"name": "CVE-2025-6965",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6965"
},
{
"name": "CVE-2023-28319",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28319"
},
{
"name": "CVE-2021-35565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35565"
},
{
"name": "CVE-2020-10251",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10251"
},
{
"name": "CVE-2024-11584",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11584"
},
{
"name": "CVE-2024-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45491"
},
{
"name": "CVE-2025-50182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50182"
},
{
"name": "CVE-2025-47906",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47906"
},
{
"name": "CVE-2020-2981",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2981"
},
{
"name": "CVE-2025-21745",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21745"
},
{
"name": "CVE-2025-21791",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21791"
},
{
"name": "CVE-2020-18781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-18781"
},
{
"name": "CVE-2025-7709",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7709"
},
{
"name": "CVE-2024-52559",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52559"
},
{
"name": "CVE-2025-38077",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38077"
},
{
"name": "CVE-2025-38251",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38251"
},
{
"name": "CVE-2022-22576",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22576"
},
{
"name": "CVE-2025-38120",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38120"
},
{
"name": "CVE-2017-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7186"
},
{
"name": "CVE-2025-38285",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38285"
},
{
"name": "CVE-2025-59375",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
},
{
"name": "CVE-2025-37750",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37750"
},
{
"name": "CVE-2021-39293",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39293"
},
{
"name": "CVE-2025-21795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21795"
},
{
"name": "CVE-2025-8194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8194"
},
{
"name": "CVE-2025-22014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22014"
},
{
"name": "CVE-2025-38161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38161"
},
{
"name": "CVE-2025-9640",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9640"
},
{
"name": "CVE-2022-1897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1897"
},
{
"name": "CVE-2022-43248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43248"
},
{
"name": "CVE-2016-3418",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3418"
},
{
"name": "CVE-2022-29824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29824"
},
{
"name": "CVE-2024-58081",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58081"
},
{
"name": "CVE-2022-1705",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1705"
},
{
"name": "CVE-2024-11053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
},
{
"name": "CVE-2024-7264",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7264"
},
{
"name": "CVE-2025-21814",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21814"
},
{
"name": "CVE-2025-50082",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50082"
},
{
"name": "CVE-2017-6829",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6829"
},
{
"name": "CVE-2025-32462",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32462"
},
{
"name": "CVE-2025-40027",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40027"
},
{
"name": "CVE-2025-50097",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50097"
},
{
"name": "CVE-2021-4214",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4214"
},
{
"name": "CVE-2025-21911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21911"
},
{
"name": "CVE-2023-24752",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24752"
},
{
"name": "CVE-2025-50181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
},
{
"name": "CVE-2024-21742",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21742"
},
{
"name": "CVE-2022-43245",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43245"
},
{
"name": "CVE-2015-2656",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2656"
},
{
"name": "CVE-2025-50084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50084"
},
{
"name": "CVE-2018-9133",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9133"
},
{
"name": "CVE-2025-50079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50079"
},
{
"name": "CVE-2025-38115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38115"
},
{
"name": "CVE-2025-21758",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21758"
},
{
"name": "CVE-2023-0767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
},
{
"name": "CVE-2025-21816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21816"
},
{
"name": "CVE-2025-1795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1795"
},
{
"name": "CVE-2021-35603",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35603"
},
{
"name": "CVE-2025-21996",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21996"
},
{
"name": "CVE-2021-36410",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36410"
},
{
"name": "CVE-2025-21780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21780"
},
{
"name": "CVE-2017-3612",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3612"
},
{
"name": "CVE-2024-12705",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12705"
},
{
"name": "CVE-2025-38153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38153"
},
{
"name": "CVE-2025-21787",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21787"
},
{
"name": "CVE-2023-28487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28487"
},
{
"name": "CVE-2023-22067",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
},
{
"name": "CVE-2023-31439",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31439"
},
{
"name": "CVE-2023-51074",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51074"
},
{
"name": "CVE-2023-23915",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23915"
},
{
"name": "CVE-2025-4517",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4517"
},
{
"name": "CVE-2018-1000074",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000074"
},
{
"name": "CVE-2025-37785",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37785"
},
{
"name": "CVE-2025-21776",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21776"
},
{
"name": "CVE-2024-58003",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58003"
},
{
"name": "CVE-2025-21917",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21917"
},
{
"name": "CVE-2025-21706",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21706"
},
{
"name": "CVE-2025-48964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48964"
},
{
"name": "CVE-2025-55193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55193"
},
{
"name": "CVE-2025-38395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38395"
},
{
"name": "CVE-2023-29499",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29499"
},
{
"name": "CVE-2025-21574",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21574"
},
{
"name": "CVE-2022-42011",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42011"
},
{
"name": "CVE-2023-39318",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39318"
},
{
"name": "CVE-2025-38337",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38337"
},
{
"name": "CVE-2025-21957",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21957"
},
{
"name": "CVE-2025-38727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38727"
},
{
"name": "CVE-2022-41720",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41720"
},
{
"name": "CVE-2024-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1013"
},
{
"name": "CVE-2022-0319",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0319"
},
{
"name": "CVE-2025-4674",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4674"
},
{
"name": "CVE-2025-30258",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30258"
},
{
"name": "CVE-2025-21999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21999"
},
{
"name": "CVE-2025-4565",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4565"
},
{
"name": "CVE-2022-41716",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41716"
},
{
"name": "CVE-2025-38465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38465"
},
{
"name": "CVE-2024-56406",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56406"
},
{
"name": "CVE-2025-38513",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38513"
},
{
"name": "CVE-2025-21736",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21736"
},
{
"name": "CVE-2025-21997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21997"
},
{
"name": "CVE-2025-21741",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21741"
},
{
"name": "CVE-2020-18032",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-18032"
},
{
"name": "CVE-2017-6833",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6833"
},
{
"name": "CVE-2025-21808",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21808"
},
{
"name": "CVE-2019-8324",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8324"
},
{
"name": "CVE-2020-2754",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2754"
},
{
"name": "CVE-2025-38086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38086"
},
{
"name": "CVE-2024-24788",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24788"
},
{
"name": "CVE-2024-58076",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58076"
},
{
"name": "CVE-2023-24751",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24751"
},
{
"name": "CVE-2025-21708",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21708"
},
{
"name": "CVE-2015-4784",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4784"
},
{
"name": "CVE-2021-4048",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4048"
},
{
"name": "CVE-2023-4527",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4527"
},
{
"name": "CVE-2022-2980",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2980"
},
{
"name": "CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"name": "CVE-2025-21992",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21992"
},
{
"name": "CVE-2025-21720",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21720"
},
{
"name": "CVE-2025-32463",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32463"
},
{
"name": "CVE-2015-7747",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7747"
},
{
"name": "CVE-2025-52999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52999"
},
{
"name": "CVE-2023-34055",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34055"
},
{
"name": "CVE-2024-41965",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41965"
},
{
"name": "CVE-2020-14796",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14796"
},
{
"name": "CVE-2024-56433",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56433"
},
{
"name": "CVE-2023-0464",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0464"
},
{
"name": "CVE-2025-55004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55004"
},
{
"name": "CVE-2014-8139",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8139"
},
{
"name": "CVE-2025-21580",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21580"
},
{
"name": "CVE-2022-29526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29526"
},
{
"name": "CVE-2025-5318",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5318"
},
{
"name": "CVE-2025-38003",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38003"
},
{
"name": "CVE-2025-38441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38441"
},
{
"name": "CVE-2023-51767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51767"
},
{
"name": "CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"name": "CVE-2023-6918",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6918"
},
{
"name": "CVE-2023-38037",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38037"
},
{
"name": "CVE-2012-5783",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-5783"
},
{
"name": "CVE-2022-2519",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2519"
},
{
"name": "CVE-2025-55754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55754"
},
{
"name": "CVE-2025-53023",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53023"
},
{
"name": "CVE-2025-21711",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21711"
},
{
"name": "CVE-2025-2998",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2998"
},
{
"name": "CVE-2023-51792",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51792"
},
{
"name": "CVE-2021-20313",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20313"
},
{
"name": "CVE-2022-30633",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30633"
},
{
"name": "CVE-2023-23931",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23931"
},
{
"name": "CVE-2025-21575",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21575"
},
{
"name": "CVE-2025-21978",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21978"
},
{
"name": "CVE-2019-16777",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16777"
},
{
"name": "CVE-2025-21760",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21760"
},
{
"name": "CVE-2023-45913",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45913"
},
{
"name": "CVE-2018-13153",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13153"
},
{
"name": "CVE-2022-0530",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0530"
},
{
"name": "CVE-2023-48236",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48236"
},
{
"name": "CVE-2025-21947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21947"
},
{
"name": "CVE-2025-21913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21913"
},
{
"name": "CVE-2023-34474",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34474"
},
{
"name": "CVE-2025-21665",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21665"
},
{
"name": "CVE-2025-38227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38227"
},
{
"name": "CVE-2018-1000079",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000079"
},
{
"name": "CVE-2025-4435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4435"
},
{
"name": "CVE-2024-58079",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58079"
},
{
"name": "CVE-2025-21966",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21966"
},
{
"name": "CVE-2025-21577",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21577"
},
{
"name": "CVE-2021-45931",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45931"
},
{
"name": "CVE-2025-38079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38079"
},
{
"name": "CVE-2021-28544",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28544"
},
{
"name": "CVE-2021-46828",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46828"
},
{
"name": "CVE-2025-21734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21734"
},
{
"name": "CVE-2025-32728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32728"
},
{
"name": "CVE-2023-2804",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2804"
},
{
"name": "CVE-2025-21970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21970"
},
{
"name": "CVE-2021-44964",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44964"
},
{
"name": "CVE-2025-6141",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6141"
},
{
"name": "CVE-2022-42012",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42012"
},
{
"name": "CVE-2018-14437",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14437"
},
{
"name": "CVE-2024-13978",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13978"
},
{
"name": "CVE-2025-21890",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21890"
},
{
"name": "CVE-2025-61984",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61984"
},
{
"name": "CVE-2021-3596",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3596"
},
{
"name": "CVE-2025-21916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21916"
},
{
"name": "CVE-2025-21925",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21925"
},
{
"name": "CVE-2024-57883",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57883"
},
{
"name": "CVE-2022-21628",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21628"
},
{
"name": "CVE-2017-6830",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6830"
},
{
"name": "CVE-2025-21927",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21927"
},
{
"name": "CVE-2021-3520",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3520"
},
{
"name": "CVE-2024-47814",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47814"
},
{
"name": "CVE-2022-2923",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2923"
},
{
"name": "CVE-2025-21799",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21799"
},
{
"name": "CVE-2024-21011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21011"
},
{
"name": "CVE-2025-6020",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6020"
},
{
"name": "CVE-2015-2626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2626"
},
{
"name": "CVE-2024-45336",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45336"
},
{
"name": "CVE-2025-21748",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21748"
},
{
"name": "CVE-2025-21785",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21785"
},
{
"name": "CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"name": "CVE-2025-7425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
},
{
"name": "CVE-2023-3978",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3978"
},
{
"name": "CVE-2021-46310",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46310"
},
{
"name": "CVE-2022-36227",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36227"
},
{
"name": "CVE-2021-2369",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2369"
},
{
"name": "CVE-2025-21883",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21883"
},
{
"name": "CVE-2023-29469",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29469"
},
{
"name": "CVE-2024-5535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5535"
},
{
"name": "CVE-2025-38074",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38074"
},
{
"name": "CVE-2024-58086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58086"
},
{
"name": "CVE-2025-38119",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38119"
},
{
"name": "CVE-2025-38245",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38245"
},
{
"name": "CVE-2022-37454",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37454"
},
{
"name": "CVE-2021-36770",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36770"
},
{
"name": "CVE-2025-21898",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21898"
},
{
"name": "CVE-2020-14152",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14152"
},
{
"name": "CVE-2025-38324",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38324"
},
{
"name": "CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"name": "CVE-2021-36976",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36976"
},
{
"name": "CVE-2024-58051",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58051"
},
{
"name": "CVE-2023-3164",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3164"
},
{
"name": "CVE-2022-3597",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3597"
},
{
"name": "CVE-2023-27535",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27535"
},
{
"name": "CVE-2022-27775",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27775"
},
{
"name": "CVE-2024-56337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56337"
},
{
"name": "CVE-2024-12718",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12718"
},
{
"name": "CVE-2018-25032",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
},
{
"name": "CVE-2025-9390",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9390"
},
{
"name": "CVE-2025-62813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62813"
},
{
"name": "CVE-2025-21857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21857"
},
{
"name": "CVE-2019-9904",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9904"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2022-42919",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42919"
},
{
"name": "CVE-2024-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0450"
},
{
"name": "CVE-2025-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9165"
},
{
"name": "CVE-2023-1981",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1981"
},
{
"name": "CVE-2023-30571",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30571"
},
{
"name": "CVE-2022-2231",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2231"
},
{
"name": "CVE-2025-46150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46150"
},
{
"name": "CVE-2024-12801",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12801"
},
{
"name": "CVE-2024-5642",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5642"
},
{
"name": "CVE-2024-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3219"
},
{
"name": "CVE-2025-21812",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21812"
},
{
"name": "CVE-2015-4781",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4781"
},
{
"name": "CVE-2023-23914",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23914"
},
{
"name": "CVE-2025-38542",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38542"
},
{
"name": "CVE-2025-38344",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38344"
},
{
"name": "CVE-2023-28120",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28120"
},
{
"name": "CVE-2025-37797",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37797"
},
{
"name": "CVE-2025-21848",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21848"
},
{
"name": "CVE-2021-3999",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3999"
},
{
"name": "CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"name": "CVE-2025-38088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38088"
},
{
"name": "CVE-2025-50096",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50096"
},
{
"name": "CVE-2022-30632",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30632"
},
{
"name": "CVE-2024-47554",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47554"
},
{
"name": "CVE-2022-27774",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27774"
},
{
"name": "CVE-2025-21683",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21683"
},
{
"name": "CVE-2025-38332",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38332"
},
{
"name": "CVE-2020-35492",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-35492"
},
{
"name": "CVE-2025-21908",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21908"
},
{
"name": "CVE-2023-1289",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1289"
},
{
"name": "CVE-2025-38386",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38386"
},
{
"name": "CVE-2023-6349",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6349"
},
{
"name": "CVE-2024-2004",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2004"
},
{
"name": "CVE-2017-3605",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3605"
},
{
"name": "CVE-2025-9232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9232"
},
{
"name": "CVE-2025-23165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23165"
},
{
"name": "CVE-2022-40303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40303"
},
{
"name": "CVE-2023-0801",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0801"
},
{
"name": "CVE-2025-9341",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9341"
},
{
"name": "CVE-2023-29406",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29406"
},
{
"name": "CVE-2017-7244",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7244"
},
{
"name": "CVE-2023-39319",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39319"
},
{
"name": "CVE-2025-21895",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21895"
},
{
"name": "CVE-2025-61795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
},
{
"name": "CVE-2025-1377",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1377"
},
{
"name": "CVE-2025-30705",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30705"
},
{
"name": "CVE-2018-16412",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16412"
},
{
"name": "CVE-2025-22005",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22005"
},
{
"name": "CVE-2019-6462",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6462"
},
{
"name": "CVE-2025-21935",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21935"
},
{
"name": "CVE-2022-4645",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4645"
},
{
"name": "CVE-2021-32493",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32493"
},
{
"name": "CVE-2023-24754",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24754"
},
{
"name": "CVE-2020-29509",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29509"
},
{
"name": "CVE-2023-5568",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5568"
},
{
"name": "CVE-2023-38470",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38470"
},
{
"name": "CVE-2025-21675",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21675"
},
{
"name": "CVE-2023-34967",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34967"
},
{
"name": "CVE-2025-38237",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38237"
},
{
"name": "CVE-2025-38174",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38174"
},
{
"name": "CVE-2025-8713",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8713"
},
{
"name": "CVE-2025-21587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21587"
},
{
"name": "CVE-2022-2869",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2869"
},
{
"name": "CVE-2021-4189",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4189"
},
{
"name": "CVE-2025-50088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50088"
},
{
"name": "CVE-2024-24785",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24785"
},
{
"name": "CVE-2023-35945",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35945"
},
{
"name": "CVE-2024-45993",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45993"
},
{
"name": "CVE-2025-6170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
},
{
"name": "CVE-2021-35937",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35937"
},
{
"name": "CVE-2024-58019",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58019"
},
{
"name": "CVE-2025-9900",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9900"
},
{
"name": "CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"name": "CVE-2025-21888",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21888"
},
{
"name": "CVE-2025-21866",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21866"
},
{
"name": "CVE-2023-40745",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40745"
},
{
"name": "CVE-2022-1962",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1962"
},
{
"name": "CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"name": "CVE-2025-3730",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3730"
},
{
"name": "CVE-2025-22010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22010"
},
{
"name": "CVE-2024-25260",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25260"
},
{
"name": "CVE-2024-21147",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21147"
},
{
"name": "CVE-2025-38037",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38037"
},
{
"name": "CVE-2017-3609",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3609"
},
{
"name": "CVE-2024-57990",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57990"
},
{
"name": "CVE-2021-29921",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29921"
},
{
"name": "CVE-2022-41717",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41717"
},
{
"name": "CVE-2014-9636",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9636"
},
{
"name": "CVE-2025-5351",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5351"
},
{
"name": "CVE-2025-52520",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52520"
},
{
"name": "CVE-2022-1622",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1622"
},
{
"name": "CVE-2017-3611",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3611"
},
{
"name": "CVE-2024-53427",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53427"
},
{
"name": "CVE-2022-2521",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2521"
},
{
"name": "CVE-2023-49582",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-49582"
},
{
"name": "CVE-2025-43857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43857"
},
{
"name": "CVE-2025-31344",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31344"
},
{
"name": "CVE-2025-21976",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21976"
},
{
"name": "CVE-2023-28321",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28321"
},
{
"name": "CVE-2024-57975",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57975"
},
{
"name": "CVE-2020-14581",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14581"
},
{
"name": "CVE-2024-7254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7254"
},
{
"name": "CVE-2021-32491",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32491"
},
{
"name": "CVE-2025-50077",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50077"
},
{
"name": "CVE-2022-2309",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2309"
},
{
"name": "CVE-2024-52533",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52533"
},
{
"name": "CVE-2023-24536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24536"
},
{
"name": "CVE-2023-22025",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22025"
},
{
"name": "CVE-2021-43527",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43527"
},
{
"name": "CVE-2022-0924",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0924"
},
{
"name": "CVE-2025-24014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24014"
},
{
"name": "CVE-2022-33068",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33068"
},
{
"name": "CVE-2025-38342",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38342"
},
{
"name": "CVE-2025-54988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54988"
},
{
"name": "CVE-2024-58068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58068"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2015-4777",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4777"
},
{
"name": "CVE-2025-7039",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7039"
},
{
"name": "CVE-2025-38167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38167"
},
{
"name": "CVE-2022-42915",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42915"
},
{
"name": "CVE-2023-0687",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0687"
},
{
"name": "CVE-2024-57998",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57998"
},
{
"name": "CVE-2021-3426",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3426"
},
{
"name": "CVE-2022-32221",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32221"
},
{
"name": "CVE-2022-1304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1304"
},
{
"name": "CVE-2021-2388",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2388"
},
{
"name": "CVE-2022-37434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37434"
},
{
"name": "CVE-2025-38257",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38257"
},
{
"name": "CVE-2022-29458",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29458"
},
{
"name": "CVE-2025-38206",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38206"
},
{
"name": "CVE-2019-12900",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12900"
},
{
"name": "CVE-2023-5156",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5156"
},
{
"name": "CVE-2024-39908",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39908"
},
{
"name": "CVE-2025-27220",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27220"
},
{
"name": "CVE-2021-32256",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32256"
},
{
"name": "CVE-2022-22942",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22942"
},
{
"name": "CVE-2024-38950",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38950"
},
{
"name": "CVE-2025-55163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
},
{
"name": "CVE-2025-21862",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21862"
},
{
"name": "CVE-2023-47282",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47282"
},
{
"name": "CVE-2016-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-20012"
},
{
"name": "CVE-2025-38111",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38111"
},
{
"name": "CVE-2024-0553",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0553"
},
{
"name": "CVE-2022-44638",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-44638"
},
{
"name": "CVE-2019-8325",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8325"
},
{
"name": "CVE-2025-21950",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21950"
},
{
"name": "CVE-2025-5918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5918"
},
{
"name": "CVE-2019-3792",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-3792"
},
{
"name": "CVE-2022-43235",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43235"
},
{
"name": "CVE-2025-50092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50092"
},
{
"name": "CVE-2025-50099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50099"
},
{
"name": "CVE-2017-3614",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3614"
},
{
"name": "CVE-2022-0562",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0562"
},
{
"name": "CVE-2022-28131",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28131"
},
{
"name": "CVE-2025-22001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22001"
},
{
"name": "CVE-2024-10524",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10524"
},
{
"name": "CVE-2025-40017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40017"
},
{
"name": "CVE-2023-45919",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45919"
},
{
"name": "CVE-2025-38326",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38326"
},
{
"name": "CVE-2025-3263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3263"
},
{
"name": "CVE-2025-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4878"
},
{
"name": "CVE-2018-15607",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15607"
},
{
"name": "CVE-2025-21899",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21899"
},
{
"name": "CVE-2025-32990",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32990"
},
{
"name": "CVE-2025-38384",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38384"
},
{
"name": "CVE-2025-40778",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40778"
},
{
"name": "CVE-2025-21719",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21719"
},
{
"name": "CVE-2025-38424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38424"
},
{
"name": "CVE-2025-38430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38430"
},
{
"name": "CVE-2025-21718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21718"
},
{
"name": "CVE-2025-3001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3001"
},
{
"name": "CVE-2025-9288",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9288"
},
{
"name": "CVE-2021-35588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35588"
},
{
"name": "CVE-2022-32545",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32545"
},
{
"name": "CVE-2025-21694",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21694"
},
{
"name": "CVE-2025-41244",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41244"
},
{
"name": "CVE-2022-24675",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24675"
},
{
"name": "CVE-2023-2603",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2603"
},
{
"name": "CVE-2025-21820",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21820"
},
{
"name": "CVE-2017-6838",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6838"
},
{
"name": "CVE-2024-41946",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41946"
},
{
"name": "CVE-2025-4802",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4802"
},
{
"name": "CVE-2024-21140",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21140"
},
{
"name": "CVE-2024-41817",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41817"
},
{
"name": "CVE-2024-57979",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57979"
},
{
"name": "CVE-2024-58071",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58071"
},
{
"name": "CVE-2025-21994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21994"
},
{
"name": "CVE-2025-30684",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30684"
},
{
"name": "CVE-2017-6835",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6835"
},
{
"name": "CVE-2024-21094",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21094"
},
{
"name": "CVE-2025-48989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48989"
},
{
"name": "CVE-2024-9143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9143"
},
{
"name": "CVE-2023-0799",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0799"
},
{
"name": "CVE-2024-12087",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12087"
},
{
"name": "CVE-2025-38420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38420"
},
{
"name": "CVE-2021-3521",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3521"
},
{
"name": "CVE-2022-23806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23806"
},
{
"name": "CVE-2022-21365",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21365"
},
{
"name": "CVE-2025-21943",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21943"
},
{
"name": "CVE-2019-16775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16775"
},
{
"name": "CVE-2024-57997",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57997"
},
{
"name": "CVE-2025-38160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38160"
},
{
"name": "CVE-2024-33601",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33601"
},
{
"name": "CVE-2025-32989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32989"
},
{
"name": "CVE-2025-6051",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6051"
},
{
"name": "CVE-2022-21283",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21283"
},
{
"name": "CVE-2022-31782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31782"
},
{
"name": "CVE-2025-50093",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50093"
},
{
"name": "CVE-2025-38107",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38107"
},
{
"name": "CVE-2025-32434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32434"
},
{
"name": "CVE-2025-22874",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22874"
},
{
"name": "CVE-2025-53069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53069"
},
{
"name": "CVE-2025-38085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38085"
},
{
"name": "CVE-2025-21806",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21806"
},
{
"name": "CVE-2025-38222",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38222"
},
{
"name": "CVE-2025-38197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38197"
},
{
"name": "CVE-2022-1271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1271"
},
{
"name": "CVE-2024-28085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28085"
},
{
"name": "CVE-2022-43253",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43253"
},
{
"name": "CVE-2021-36221",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36221"
},
{
"name": "CVE-2024-57977",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57977"
},
{
"name": "CVE-2018-1000075",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000075"
},
{
"name": "CVE-2025-53019",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53019"
},
{
"name": "CVE-2020-14782",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14782"
},
{
"name": "CVE-2025-50059",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
},
{
"name": "CVE-2024-5569",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5569"
},
{
"name": "CVE-2024-57952",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57952"
},
{
"name": "CVE-2025-53367",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53367"
},
{
"name": "CVE-2025-21579",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21579"
},
{
"name": "CVE-2021-45942",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45942"
},
{
"name": "CVE-2022-1615",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1615"
},
{
"name": "CVE-2025-21928",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21928"
},
{
"name": "CVE-2021-20246",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20246"
},
{
"name": "CVE-2025-21707",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21707"
},
{
"name": "CVE-2023-24755",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24755"
},
{
"name": "CVE-2024-34156",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
},
{
"name": "CVE-2022-2880",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2880"
},
{
"name": "CVE-2025-5025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5025"
},
{
"name": "CVE-2023-21937",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21937"
},
{
"name": "CVE-2022-23773",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23773"
},
{
"name": "CVE-2025-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22007"
},
{
"name": "CVE-2023-24539",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24539"
},
{
"name": "CVE-2024-27281",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27281"
},
{
"name": "CVE-2025-38467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38467"
},
{
"name": "CVE-2024-34459",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34459"
},
{
"name": "CVE-2025-21804",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21804"
},
{
"name": "CVE-2021-34558",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-34558"
},
{
"name": "CVE-2021-3737",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3737"
},
{
"name": "CVE-2025-49795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49795"
},
{
"name": "CVE-2017-6837",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6837"
},
{
"name": "CVE-2014-9913",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9913"
},
{
"name": "CVE-2025-21934",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21934"
},
{
"name": "CVE-2025-38072",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38072"
},
{
"name": "CVE-2025-53044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53044"
},
{
"name": "CVE-2023-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6237"
},
{
"name": "CVE-2024-37407",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37407"
},
{
"name": "CVE-2015-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4775"
},
{
"name": "CVE-2025-22011",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22011"
},
{
"name": "CVE-2022-1725",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1725"
},
{
"name": "CVE-2022-43252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43252"
},
{
"name": "CVE-2023-0614",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0614"
},
{
"name": "CVE-2016-0694",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0694"
},
{
"name": "CVE-2023-6228",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6228"
},
{
"name": "CVE-2021-46848",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46848"
},
{
"name": "CVE-2024-5197",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5197"
},
{
"name": "CVE-2020-21606",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21606"
},
{
"name": "CVE-2025-38075",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38075"
},
{
"name": "CVE-2025-38000",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38000"
},
{
"name": "CVE-2022-40674",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40674"
},
{
"name": "CVE-2025-1376",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1376"
},
{
"name": "CVE-2025-30761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30761"
},
{
"name": "CVE-2001-1269",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1269"
},
{
"name": "CVE-2025-50087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50087"
},
{
"name": "CVE-2024-22365",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22365"
},
{
"name": "CVE-2025-38058",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38058"
},
{
"name": "CVE-2023-20873",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20873"
},
{
"name": "CVE-2024-47535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47535"
},
{
"name": "CVE-2022-4450",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4450"
},
{
"name": "CVE-2025-38617",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38617"
},
{
"name": "CVE-2025-21762",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21762"
},
{
"name": "CVE-2023-47169",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47169"
},
{
"name": "CVE-2025-38122",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38122"
},
{
"name": "CVE-2025-21801",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21801"
},
{
"name": "CVE-2024-7592",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7592"
},
{
"name": "CVE-2025-48988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48988"
},
{
"name": "CVE-2025-38083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38083"
},
{
"name": "CVE-2023-2650",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2650"
},
{
"name": "CVE-2023-0795",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0795"
},
{
"name": "CVE-2015-2583",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2583"
},
{
"name": "CVE-2025-21692",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21692"
},
{
"name": "CVE-2025-38173",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38173"
},
{
"name": "CVE-2022-21434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21434"
},
{
"name": "CVE-2025-2148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2148"
},
{
"name": "CVE-2024-2236",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2236"
},
{
"name": "CVE-2025-38143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38143"
},
{
"name": "CVE-2023-4039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4039"
},
{
"name": "CVE-2025-45768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-45768"
},
{
"name": "CVE-2023-38469",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38469"
},
{
"name": "CVE-2024-38428",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38428"
},
{
"name": "CVE-2022-3821",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3821"
},
{
"name": "CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"name": "CVE-2025-21869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21869"
},
{
"name": "CVE-2025-1365",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1365"
},
{
"name": "CVE-2023-32570",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32570"
},
{
"name": "CVE-2025-54410",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54410"
},
{
"name": "CVE-2023-52970",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52970"
},
{
"name": "CVE-2022-3996",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3996"
},
{
"name": "CVE-2024-25062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25062"
},
{
"name": "CVE-2016-5841",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5841"
},
{
"name": "CVE-2022-2879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2879"
},
{
"name": "CVE-2025-53101",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53101"
},
{
"name": "CVE-2022-32205",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32205"
},
{
"name": "CVE-2023-27534",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27534"
},
{
"name": "CVE-2024-2398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2398"
},
{
"name": "CVE-2023-24532",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24532"
},
{
"name": "CVE-2023-27536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27536"
},
{
"name": "CVE-2025-52434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52434"
},
{
"name": "CVE-2024-54458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54458"
},
{
"name": "CVE-2022-44267",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-44267"
},
{
"name": "CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"name": "CVE-2015-4783",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4783"
},
{
"name": "CVE-2019-8321",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8321"
},
{
"name": "CVE-2025-21826",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21826"
},
{
"name": "CVE-2025-29768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29768"
},
{
"name": "CVE-2015-4774",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4774"
},
{
"name": "CVE-2023-50495",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50495"
},
{
"name": "CVE-2022-23772",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23772"
},
{
"name": "CVE-2022-21294",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21294"
},
{
"name": "CVE-2025-21750",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21750"
},
{
"name": "CVE-2017-11164",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11164"
},
{
"name": "CVE-2024-57924",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57924"
},
{
"name": "CVE-2025-21912",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21912"
},
{
"name": "CVE-2018-13440",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13440"
},
{
"name": "CVE-2022-42898",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42898"
},
{
"name": "CVE-2025-46393",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46393"
},
{
"name": "CVE-2022-43551",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43551"
},
{
"name": "CVE-2021-0561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-0561"
},
{
"name": "CVE-2018-12599",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12599"
},
{
"name": "CVE-2025-21859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21859"
},
{
"name": "CVE-2025-38416",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38416"
},
{
"name": "CVE-2022-1587",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1587"
},
{
"name": "CVE-2025-21825",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21825"
},
{
"name": "CVE-2025-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30698"
},
{
"name": "CVE-2017-7246",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7246"
},
{
"name": "CVE-2020-2755",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2755"
},
{
"name": "CVE-2025-8714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8714"
},
{
"name": "CVE-2023-27533",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27533"
},
{
"name": "CVE-2022-0284",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0284"
},
{
"name": "CVE-2017-7500",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7500"
},
{
"name": "CVE-2025-9086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9086"
},
{
"name": "CVE-2025-49124",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49124"
},
{
"name": "CVE-2023-6481",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6481"
},
{
"name": "CVE-2024-58016",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58016"
},
{
"name": "CVE-2020-14779",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14779"
},
{
"name": "CVE-2025-21903",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21903"
},
{
"name": "CVE-2021-41772",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41772"
},
{
"name": "CVE-2021-32292",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32292"
},
{
"name": "CVE-2025-38194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38194"
},
{
"name": "CVE-2024-0727",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0727"
},
{
"name": "CVE-2023-6378",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6378"
},
{
"name": "CVE-2024-10041",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10041"
},
{
"name": "CVE-2023-6129",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6129"
},
{
"name": "CVE-2022-34903",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34903"
},
{
"name": "CVE-2023-1667",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1667"
},
{
"name": "CVE-2022-2953",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2953"
},
{
"name": "CVE-2022-43238",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43238"
},
{
"name": "CVE-2025-3121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3121"
},
{
"name": "CVE-2022-4899",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4899"
},
{
"name": "CVE-2022-43680",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43680"
},
{
"name": "CVE-2025-21956",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21956"
},
{
"name": "CVE-2024-20696",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20696"
},
{
"name": "CVE-2025-21761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21761"
},
{
"name": "CVE-2025-46149",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46149"
},
{
"name": "CVE-2021-26945",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26945"
},
{
"name": "CVE-2025-37932",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37932"
},
{
"name": "CVE-2022-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3219"
},
{
"name": "CVE-2025-46152",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46152"
},
{
"name": "CVE-2025-37890",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37890"
},
{
"name": "CVE-2024-57951",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57951"
},
{
"name": "CVE-2025-4673",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4673"
},
{
"name": "CVE-2022-34169",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34169"
},
{
"name": "CVE-2025-38348",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38348"
},
{
"name": "CVE-2023-34969",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34969"
},
{
"name": "CVE-2025-21844",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21844"
},
{
"name": "CVE-2025-21885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21885"
},
{
"name": "CVE-2020-22916",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-22916"
},
{
"name": "CVE-2025-21784",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21784"
},
{
"name": "CVE-2025-31672",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31672"
},
{
"name": "CVE-2025-21681",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21681"
},
{
"name": "CVE-2023-22045",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22045"
},
{
"name": "CVE-2025-38540",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38540"
},
{
"name": "CVE-2025-5916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5916"
},
{
"name": "CVE-2025-21676",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21676"
},
{
"name": "CVE-2025-30721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30721"
},
{
"name": "CVE-2025-38403",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38403"
},
{
"name": "CVE-2022-28463",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28463"
},
{
"name": "CVE-2022-23308",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23308"
},
{
"name": "CVE-2025-21726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21726"
},
{
"name": "CVE-2023-29400",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29400"
},
{
"name": "CVE-2025-58056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58056"
},
{
"name": "CVE-2025-22871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22871"
},
{
"name": "CVE-2018-3779",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3779"
},
{
"name": "CVE-2024-21138",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21138"
},
{
"name": "CVE-2020-28196",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-28196"
},
{
"name": "CVE-2024-27407",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27407"
},
{
"name": "CVE-2025-41232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41232"
},
{
"name": "CVE-2024-58020",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58020"
},
{
"name": "CVE-2025-50091",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50091"
},
{
"name": "CVE-2025-10911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10911"
},
{
"name": "CVE-2025-32988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32988"
},
{
"name": "CVE-2021-31566",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31566"
},
{
"name": "CVE-2024-10963",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10963"
},
{
"name": "CVE-2022-28805",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28805"
},
{
"name": "CVE-2024-26461",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26461"
},
{
"name": "CVE-2024-34750",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34750"
},
{
"name": "CVE-2021-29923",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29923"
},
{
"name": "CVE-2017-3604",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3604"
},
{
"name": "CVE-2025-21723",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21723"
},
{
"name": "CVE-2023-0804",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0804"
},
{
"name": "CVE-2023-22049",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22049"
},
{
"name": "CVE-2024-24787",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24787"
},
{
"name": "CVE-2025-21802",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21802"
},
{
"name": "CVE-2022-21341",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21341"
},
{
"name": "CVE-2025-38146",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38146"
},
{
"name": "CVE-2025-21705",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21705"
},
{
"name": "CVE-2024-38828",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38828"
},
{
"name": "CVE-2023-27538",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27538"
},
{
"name": "CVE-2022-1355",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1355"
},
{
"name": "CVE-2025-47291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47291"
},
{
"name": "CVE-2023-4641",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4641"
},
{
"name": "CVE-2025-27113",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27113"
},
{
"name": "CVE-2024-47081",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47081"
},
{
"name": "CVE-2023-36054",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36054"
},
{
"name": "CVE-2024-26458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26458"
},
{
"name": "CVE-2025-38418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38418"
},
{
"name": "CVE-2025-38090",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38090"
},
{
"name": "CVE-2025-21721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21721"
},
{
"name": "CVE-2025-21810",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21810"
},
{
"name": "CVE-2022-1420",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1420"
},
{
"name": "CVE-2022-23218",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23218"
},
{
"name": "CVE-2021-24031",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-24031"
},
{
"name": "CVE-2025-23166",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23166"
},
{
"name": "CVE-2022-41724",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41724"
},
{
"name": "CVE-2025-46153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46153"
},
{
"name": "CVE-2025-21877",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21877"
},
{
"name": "CVE-2023-0797",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0797"
},
{
"name": "CVE-2025-5994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5994"
},
{
"name": "CVE-2021-38115",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38115"
},
{
"name": "CVE-2025-38415",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38415"
},
{
"name": "CVE-2021-31879",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31879"
},
{
"name": "CVE-2024-55549",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-55549"
},
{
"name": "CVE-2020-8908",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8908"
},
{
"name": "CVE-2024-49887",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49887"
},
{
"name": "CVE-2025-22134",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22134"
},
{
"name": "CVE-2021-35578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35578"
},
{
"name": "CVE-2025-1215",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1215"
},
{
"name": "CVE-2024-6119",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6119"
},
{
"name": "CVE-2023-1916",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1916"
},
{
"name": "CVE-2021-20309",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20309"
},
{
"name": "CVE-2022-29217",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29217"
},
{
"name": "CVE-2024-0397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0397"
},
{
"name": "CVE-2022-30634",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30634"
},
{
"name": "CVE-2023-38472",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38472"
},
{
"name": "CVE-2024-56826",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56826"
},
{
"name": "CVE-2017-12643",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12643"
},
{
"name": "CVE-2024-57953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57953"
},
{
"name": "CVE-2020-14583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14583"
},
{
"name": "CVE-2025-24294",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24294"
},
{
"name": "CVE-2023-48232",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48232"
},
{
"name": "CVE-2021-26720",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26720"
},
{
"name": "CVE-2025-54801",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54801"
},
{
"name": "CVE-2025-40909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40909"
},
{
"name": "CVE-2025-53054",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53054"
},
{
"name": "CVE-2025-21878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21878"
},
{
"name": "CVE-2023-24756",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24756"
},
{
"name": "CVE-2017-3607",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3607"
},
{
"name": "CVE-2021-44716",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44716"
},
{
"name": "CVE-2022-2520",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2520"
},
{
"name": "CVE-2022-21340",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21340"
},
{
"name": "CVE-2024-47874",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47874"
},
{
"name": "CVE-2025-21670",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21670"
},
{
"name": "CVE-2025-9403",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9403"
},
{
"name": "CVE-2023-1255",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1255"
},
{
"name": "CVE-2025-21739",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21739"
},
{
"name": "CVE-2016-4074",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4074"
},
{
"name": "CVE-2024-0746",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0746"
},
{
"name": "CVE-2025-21775",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21775"
},
{
"name": "CVE-2024-12254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12254"
},
{
"name": "CVE-2025-21846",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21846"
},
{
"name": "CVE-2022-33099",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33099"
},
{
"name": "CVE-2023-45931",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45931"
},
{
"name": "CVE-2025-8114",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8114"
},
{
"name": "CVE-2025-38400",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38400"
},
{
"name": "CVE-2023-6004",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6004"
},
{
"name": "CVE-2025-32387",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32387"
},
{
"name": "CVE-2024-26775",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26775"
},
{
"name": "CVE-2022-25309",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25309"
},
{
"name": "CVE-2025-4516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4516"
},
{
"name": "CVE-2025-38136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38136"
},
{
"name": "CVE-2024-38808",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38808"
},
{
"name": "CVE-2025-22869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
},
{
"name": "CVE-2024-12747",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12747"
},
{
"name": "CVE-2022-3358",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3358"
},
{
"name": "CVE-2023-41175",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-41175"
},
{
"name": "CVE-2023-48234",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48234"
},
{
"name": "CVE-2025-55212",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55212"
},
{
"name": "CVE-2022-36087",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36087"
},
{
"name": "CVE-2022-32547",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32547"
},
{
"name": "CVE-2025-6021",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6021"
},
{
"name": "CVE-2022-0351",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0351"
},
{
"name": "CVE-2022-35737",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35737"
},
{
"name": "CVE-2022-21293",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21293"
},
{
"name": "CVE-2022-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2097"
},
{
"name": "CVE-2022-26280",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26280"
},
{
"name": "CVE-2025-37752",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37752"
},
{
"name": "CVE-2025-55668",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55668"
},
{
"name": "CVE-2023-7008",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7008"
},
{
"name": "CVE-2022-1354",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1354"
},
{
"name": "CVE-2023-24540",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24540"
},
{
"name": "CVE-2025-21873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21873"
},
{
"name": "CVE-2024-4603",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4603"
},
{
"name": "CVE-2025-38048",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38048"
},
{
"name": "CVE-2019-13147",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13147"
},
{
"name": "CVE-2025-50104",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50104"
},
{
"name": "CVE-2025-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25193"
},
{
"name": "CVE-2020-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2800"
},
{
"name": "CVE-2024-8096",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8096"
},
{
"name": "CVE-2018-11655",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11655"
},
{
"name": "CVE-2022-4415",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4415"
},
{
"name": "CVE-2022-2928",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2928"
},
{
"name": "CVE-2025-21765",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21765"
},
{
"name": "CVE-2023-3576",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3576"
},
{
"name": "CVE-2025-38477",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38477"
},
{
"name": "CVE-2023-4806",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4806"
},
{
"name": "CVE-2025-61772",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61772"
},
{
"name": "CVE-2025-57803",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-57803"
},
{
"name": "CVE-2023-46246",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46246"
},
{
"name": "CVE-2025-21782",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21782"
},
{
"name": "CVE-2023-31437",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31437"
},
{
"name": "CVE-2023-47039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47039"
},
{
"name": "CVE-2025-30722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30722"
},
{
"name": "CVE-2024-43802",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43802"
},
{
"name": "CVE-2025-38177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38177"
},
{
"name": "CVE-2016-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2781"
},
{
"name": "CVE-2023-31484",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31484"
},
{
"name": "CVE-2024-56827",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56827"
},
{
"name": "CVE-2023-29383",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29383"
},
{
"name": "CVE-2024-21145",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21145"
},
{
"name": "CVE-2022-32206",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32206"
},
{
"name": "CVE-2023-37769",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-37769"
},
{
"name": "CVE-2025-21926",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21926"
},
{
"name": "CVE-2022-21282",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21282"
},
{
"name": "CVE-2022-21349",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21349"
},
{
"name": "CVE-2020-29511",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29511"
},
{
"name": "CVE-2024-50602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50602"
},
{
"name": "CVE-2015-7697",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7697"
},
{
"name": "CVE-2025-22870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22870"
},
{
"name": "CVE-2025-21742",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21742"
},
{
"name": "CVE-2025-30687",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30687"
},
{
"name": "CVE-2023-21968",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21968"
},
{
"name": "CVE-2022-43243",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43243"
},
{
"name": "CVE-2024-58002",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58002"
},
{
"name": "CVE-2017-16231",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-16231"
},
{
"name": "CVE-2025-38406",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38406"
},
{
"name": "CVE-2025-50101",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50101"
},
{
"name": "CVE-2025-21930",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21930"
},
{
"name": "CVE-2021-35942",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35942"
},
{
"name": "CVE-2025-46701",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46701"
},
{
"name": "CVE-2025-38001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38001"
},
{
"name": "CVE-2025-32415",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32415"
},
{
"name": "CVE-2025-24855",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24855"
},
{
"name": "CVE-2025-5702",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5702"
},
{
"name": "CVE-2025-21870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21870"
},
{
"name": "CVE-2017-9409",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9409"
},
{
"name": "CVE-2023-24537",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24537"
},
{
"name": "CVE-2018-1000077",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000077"
},
{
"name": "CVE-2025-21892",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21892"
},
{
"name": "CVE-2024-58052",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58052"
},
{
"name": "CVE-2025-21944",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21944"
},
{
"name": "CVE-2025-21905",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21905"
},
{
"name": "CVE-2024-30171",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30171"
},
{
"name": "CVE-2024-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23337"
},
{
"name": "CVE-2016-0689",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0689"
},
{
"name": "CVE-2025-38352",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38352"
},
{
"name": "CVE-2025-30749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
},
{
"name": "CVE-2024-54456",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54456"
},
{
"name": "CVE-2025-61748",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61748"
},
{
"name": "CVE-2025-21920",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21920"
},
{
"name": "CVE-2025-55554",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55554"
},
{
"name": "CVE-2024-43168",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43168"
},
{
"name": "CVE-2014-8140",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8140"
},
{
"name": "CVE-2025-22235",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22235"
},
{
"name": "CVE-2025-22016",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22016"
},
{
"name": "CVE-2025-4207",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4207"
},
{
"name": "CVE-2021-45346",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45346"
},
{
"name": "CVE-2025-37756",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37756"
},
{
"name": "CVE-2022-0908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0908"
},
{
"name": "CVE-2025-38263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38263"
},
{
"name": "CVE-2025-21667",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21667"
},
{
"name": "CVE-2025-9230",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9230"
},
{
"name": "CVE-2024-46901",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46901"
},
{
"name": "CVE-2023-49083",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-49083"
},
{
"name": "CVE-2025-21955",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21955"
},
{
"name": "CVE-2025-8677",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8677"
},
{
"name": "CVE-2025-21773",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21773"
},
{
"name": "CVE-2025-53040",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53040"
},
{
"name": "CVE-2025-38218",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38218"
},
{
"name": "CVE-2023-45287",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45287"
},
{
"name": "CVE-2025-53906",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53906"
},
{
"name": "CVE-2025-27789",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27789"
},
{
"name": "CVE-2025-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1352"
},
{
"name": "CVE-2024-43167",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43167"
},
{
"name": "CVE-2021-28861",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28861"
},
{
"name": "CVE-2024-4741",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4741"
},
{
"name": "CVE-2022-21248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21248"
},
{
"name": "CVE-2021-33574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33574"
},
{
"name": "CVE-2018-1000035",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000035"
},
{
"name": "CVE-2021-40211",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40211"
},
{
"name": "CVE-2025-48924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
},
{
"name": "CVE-2024-58001",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58001"
},
{
"name": "CVE-2025-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38393"
},
{
"name": "CVE-2024-26256",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26256"
},
{
"name": "CVE-2023-21930",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21930"
},
{
"name": "CVE-2019-18276",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18276"
},
{
"name": "CVE-2025-38618",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38618"
},
{
"name": "CVE-2021-3326",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3326"
},
{
"name": "CVE-2023-2283",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2283"
},
{
"name": "CVE-2020-0499",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0499"
},
{
"name": "CVE-2025-8916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8916"
},
{
"name": "CVE-2025-21724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21724"
},
{
"name": "CVE-2025-32414",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32414"
},
{
"name": "CVE-2025-8885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8885"
},
{
"name": "CVE-2025-3136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3136"
},
{
"name": "CVE-2025-55160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55160"
},
{
"name": "CVE-2025-21891",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21891"
},
{
"name": "CVE-2025-38249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38249"
},
{
"name": "CVE-2023-40403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40403"
},
{
"name": "CVE-2025-22013",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22013"
},
{
"name": "CVE-2024-50157",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50157"
},
{
"name": "CVE-2022-48703",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48703"
},
{
"name": "CVE-2025-38154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38154"
},
{
"name": "CVE-2022-1674",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1674"
},
{
"name": "CVE-2024-20918",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20918"
},
{
"name": "CVE-2025-21858",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21858"
},
{
"name": "CVE-2025-41249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41249"
},
{
"name": "CVE-2022-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30699"
},
{
"name": "CVE-2025-21672",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21672"
},
{
"name": "CVE-2025-38389",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38389"
},
{
"name": "CVE-2025-38448",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38448"
},
{
"name": "CVE-2022-48281",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48281"
},
{
"name": "CVE-2023-2426",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2426"
},
{
"name": "CVE-2021-35938",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35938"
},
{
"name": "CVE-2025-30704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30704"
},
{
"name": "CVE-2021-35564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35564"
},
{
"name": "CVE-2024-57949",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57949"
},
{
"name": "CVE-2025-1632",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1632"
},
{
"name": "CVE-2021-20176",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20176"
},
{
"name": "CVE-2025-21979",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21979"
},
{
"name": "CVE-2022-3278",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3278"
},
{
"name": "CVE-2022-30580",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30580"
},
{
"name": "CVE-2025-21821",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21821"
},
{
"name": "CVE-2022-28321",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28321"
},
{
"name": "CVE-2025-55298",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55298"
},
{
"name": "CVE-2022-43241",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43241"
},
{
"name": "CVE-2017-3606",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3606"
},
{
"name": "CVE-2023-52969",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52969"
},
{
"name": "CVE-2018-1000073",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000073"
},
{
"name": "CVE-2025-38052",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38052"
},
{
"name": "CVE-2025-38377",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38377"
},
{
"name": "CVE-2023-20883",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20883"
},
{
"name": "CVE-2025-21733",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21733"
},
{
"name": "CVE-2023-22656",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22656"
},
{
"name": "CVE-2025-46551",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46551"
},
{
"name": "CVE-2025-43965",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43965"
},
{
"name": "CVE-2022-40090",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40090"
},
{
"name": "CVE-2021-36408",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36408"
},
{
"name": "CVE-2023-24329",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24329"
},
{
"name": "CVE-2025-21963",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21963"
},
{
"name": "CVE-2025-53045",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53045"
},
{
"name": "CVE-2023-39327",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39327"
},
{
"name": "CVE-2017-18253",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18253"
},
{
"name": "CVE-2024-12243",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12243"
},
{
"name": "CVE-2024-26462",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26462"
},
{
"name": "CVE-2024-58053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58053"
},
{
"name": "CVE-2025-38516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38516"
},
{
"name": "CVE-2025-30693",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30693"
},
{
"name": "CVE-2025-38462",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38462"
},
{
"name": "CVE-2025-38350",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38350"
},
{
"name": "CVE-2025-38428",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38428"
},
{
"name": "CVE-2025-27363",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27363"
},
{
"name": "CVE-2018-13410",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13410"
},
{
"name": "CVE-2025-2099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2099"
},
{
"name": "CVE-2025-38262",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38262"
},
{
"name": "CVE-2025-6638",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6638"
},
{
"name": "CVE-2025-21585",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21585"
},
{
"name": "CVE-2023-24531",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24531"
},
{
"name": "CVE-2025-38138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38138"
},
{
"name": "CVE-2021-3610",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3610"
},
{
"name": "CVE-2024-58077",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58077"
},
{
"name": "CVE-2025-5283",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5283"
},
{
"name": "CVE-2025-21754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21754"
},
{
"name": "CVE-2024-12088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12088"
},
{
"name": "CVE-2023-24538",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24538"
},
{
"name": "CVE-2025-38035",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38035"
},
{
"name": "CVE-2023-2975",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2975"
},
{
"name": "CVE-2025-37997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37997"
},
{
"name": "CVE-2025-24928",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24928"
},
{
"name": "CVE-2021-44717",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44717"
},
{
"name": "CVE-2025-2312",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2312"
},
{
"name": "CVE-2025-0395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0395"
},
{
"name": "CVE-2025-53506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53506"
},
{
"name": "CVE-2025-21960",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21960"
},
{
"name": "CVE-2025-38310",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38310"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2015-4786",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4786"
},
{
"name": "CVE-2020-14155",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14155"
},
{
"name": "CVE-2022-3602",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3602"
},
{
"name": "CVE-2025-37963",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37963"
},
{
"name": "CVE-2022-43250",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43250"
},
{
"name": "CVE-2022-40304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40304"
},
{
"name": "CVE-2025-38226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38226"
},
{
"name": "CVE-2025-4947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4947"
},
{
"name": "CVE-2023-4911",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4911"
},
{
"name": "CVE-2022-29804",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29804"
},
{
"name": "CVE-2023-38473",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38473"
},
{
"name": "CVE-2025-38443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38443"
},
{
"name": "CVE-2025-0725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0725"
},
{
"name": "CVE-2023-2976",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2976"
},
{
"name": "CVE-2025-52099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52099"
},
{
"name": "CVE-2023-43887",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43887"
},
{
"name": "CVE-2025-21967",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21967"
},
{
"name": "CVE-2025-7424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7424"
},
{
"name": "CVE-2025-1094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1094"
},
{
"name": "CVE-2021-24032",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-24032"
},
{
"name": "CVE-2025-38439",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38439"
},
{
"name": "CVE-2022-1434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1434"
},
{
"name": "CVE-2025-41254",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41254"
},
{
"name": "CVE-2022-21496",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21496"
},
{
"name": "CVE-2022-41723",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41723"
},
{
"name": "CVE-2020-2757",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2757"
},
{
"name": "CVE-2025-53864",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53864"
},
{
"name": "CVE-2025-38145",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38145"
},
{
"name": "CVE-2022-2598",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2598"
},
{
"name": "CVE-2020-27829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27829"
},
{
"name": "CVE-2024-4032",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4032"
},
{
"name": "CVE-2025-37948",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37948"
},
{
"name": "CVE-2021-27645",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27645"
},
{
"name": "CVE-2025-21863",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21863"
},
{
"name": "CVE-2025-21856",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21856"
},
{
"name": "CVE-2025-53053",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53053"
},
{
"name": "CVE-2022-2509",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2509"
},
{
"name": "CVE-2024-28835",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28835"
},
{
"name": "CVE-2025-54388",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54388"
},
{
"name": "CVE-2025-21749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21749"
},
{
"name": "CVE-2017-6839",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6839"
},
{
"name": "CVE-2023-1906",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1906"
},
{
"name": "CVE-2025-40025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40025"
},
{
"name": "CVE-2025-38051",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38051"
},
{
"name": "CVE-2021-35556",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35556"
},
{
"name": "CVE-2025-49796",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49796"
},
{
"name": "CVE-2022-34526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34526"
},
{
"name": "CVE-2025-8058",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8058"
},
{
"name": "CVE-2023-47471",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47471"
},
{
"name": "CVE-2022-2868",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2868"
},
{
"name": "CVE-2022-1771",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1771"
},
{
"name": "CVE-2025-21945",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21945"
},
{
"name": "CVE-2021-32492",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32492"
},
{
"name": "CVE-2023-39323",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39323"
},
{
"name": "CVE-2023-29402",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29402"
},
{
"name": "CVE-2025-55005",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55005"
},
{
"name": "CVE-2025-32955",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32955"
},
{
"name": "CVE-2025-8732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8732"
},
{
"name": "CVE-2025-38044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38044"
},
{
"name": "CVE-2022-1586",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1586"
},
{
"name": "CVE-2023-39326",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39326"
},
{
"name": "CVE-2024-52616",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52616"
},
{
"name": "CVE-2025-38498",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38498"
},
{
"name": "CVE-2025-40015",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40015"
},
{
"name": "CVE-2024-21085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21085"
},
{
"name": "CVE-2025-21673",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21673"
},
{
"name": "CVE-2025-21829",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21829"
},
{
"name": "CVE-2025-21502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21502"
},
{
"name": "CVE-2024-57999",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57999"
},
{
"name": "CVE-2018-16645",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16645"
},
{
"name": "CVE-2025-22008",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22008"
},
{
"name": "CVE-2023-38039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38039"
},
{
"name": "CVE-2023-29409",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29409"
},
{
"name": "CVE-2022-21443",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21443"
},
{
"name": "CVE-2025-21969",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21969"
},
{
"name": "CVE-2025-38200",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38200"
},
{
"name": "CVE-2025-40007",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40007"
},
{
"name": "CVE-2024-58072",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58072"
},
{
"name": "CVE-2025-38273",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38273"
},
{
"name": "CVE-2025-38346",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38346"
},
{
"name": "CVE-2025-55315",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55315"
},
{
"name": "CVE-2018-11813",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11813"
},
{
"name": "CVE-2025-21722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21722"
},
{
"name": "CVE-2024-50379",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50379"
},
{
"name": "CVE-2021-35560",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35560"
},
{
"name": "CVE-2023-39325",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39325"
},
{
"name": "CVE-2025-21793",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21793"
},
{
"name": "CVE-2022-2719",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2719"
},
{
"name": "CVE-2025-21581",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21581"
},
{
"name": "CVE-2022-45873",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-45873"
},
{
"name": "CVE-2023-34151",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34151"
},
{
"name": "CVE-2023-51384",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51384"
},
{
"name": "CVE-2021-43809",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43809"
},
{
"name": "CVE-2025-5914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
},
{
"name": "CVE-2015-1606",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1606"
},
{
"name": "CVE-2025-21894",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21894"
},
{
"name": "CVE-2025-21919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21919"
},
{
"name": "CVE-2023-3896",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3896"
},
{
"name": "CVE-2023-2908",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2908"
},
{
"name": "CVE-2024-20945",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20945"
},
{
"name": "CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"name": "CVE-2023-39615",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39615"
},
{
"name": "CVE-2023-24534",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24534"
},
{
"name": "CVE-2025-21854",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21854"
},
{
"name": "CVE-2017-7501",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7501"
},
{
"name": "CVE-2024-21131",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21131"
},
{
"name": "CVE-2023-31486",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31486"
},
{
"name": "CVE-2020-21599",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21599"
},
{
"name": "CVE-2025-41242",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41242"
},
{
"name": "CVE-2024-21210",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21210"
},
{
"name": "CVE-2013-0340",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0340"
},
{
"name": "CVE-2023-3446",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3446"
},
{
"name": "CVE-2025-21759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21759"
},
{
"name": "CVE-2023-32611",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32611"
},
{
"name": "CVE-2024-38816",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38816"
},
{
"name": "CVE-2024-2511",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2511"
},
{
"name": "CVE-2015-20107",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-20107"
},
{
"name": "CVE-2023-39978",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39978"
},
{
"name": "CVE-2024-34397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34397"
},
{
"name": "CVE-2025-38320",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38320"
},
{
"name": "CVE-2025-53057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53057"
},
{
"name": "CVE-2024-24786",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
},
{
"name": "CVE-2025-8177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8177"
},
{
"name": "CVE-2025-21968",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21968"
},
{
"name": "CVE-2024-58083",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58083"
},
{
"name": "CVE-2021-20311",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20311"
},
{
"name": "CVE-2024-58055",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58055"
},
{
"name": "CVE-2025-21991",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21991"
},
{
"name": "CVE-2023-28486",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28486"
},
{
"name": "CVE-2020-27618",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27618"
},
{
"name": "CVE-2024-57993",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57993"
},
{
"name": "CVE-2025-21887",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21887"
},
{
"name": "CVE-2023-6246",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6246"
},
{
"name": "CVE-2021-20241",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20241"
},
{
"name": "CVE-2017-12674",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12674"
},
{
"name": "CVE-2023-0800",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0800"
},
{
"name": "CVE-2025-62171",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62171"
},
{
"name": "CVE-2025-38280",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38280"
},
{
"name": "CVE-2023-5388",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5388"
},
{
"name": "CVE-2018-1000078",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000078"
},
{
"name": "CVE-2020-2756",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2756"
},
{
"name": "CVE-2025-50950",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50950"
},
{
"name": "CVE-2020-21605",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21605"
},
{
"name": "CVE-2024-54534",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54534"
},
{
"name": "CVE-2023-21967",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21967"
},
{
"name": "CVE-2025-38084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38084"
},
{
"name": "CVE-2024-34155",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34155"
},
{
"name": "CVE-2022-23219",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23219"
},
{
"name": "CVE-2017-1000476",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000476"
},
{
"name": "CVE-2015-2640",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2640"
},
{
"name": "CVE-2025-30685",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30685"
},
{
"name": "CVE-2024-41123",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41123"
},
{
"name": "CVE-2025-6921",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6921"
},
{
"name": "CVE-2015-8863",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8863"
},
{
"name": "CVE-2022-21619",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21619"
},
{
"name": "CVE-2025-30695",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30695"
},
{
"name": "CVE-2025-30688",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30688"
},
{
"name": "CVE-2023-5752",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5752"
},
{
"name": "CVE-2018-11656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11656"
},
{
"name": "CVE-2025-38103",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38103"
},
{
"name": "CVE-2022-2127",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2127"
},
{
"name": "CVE-2021-25217",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25217"
},
{
"name": "CVE-2025-38514",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38514"
},
{
"name": "CVE-2018-19876",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19876"
},
{
"name": "CVE-2025-61780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61780"
},
{
"name": "CVE-2021-20310",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20310"
},
{
"name": "CVE-2021-20245",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20245"
},
{
"name": "CVE-2021-35561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35561"
},
{
"name": "CVE-2025-21732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21732"
},
{
"name": "CVE-2025-38569",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38569"
},
{
"name": "CVE-2022-21476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21476"
},
{
"name": "CVE-2023-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22796"
},
{
"name": "CVE-2025-21875",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21875"
},
{
"name": "CVE-2023-0361",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0361"
},
{
"name": "CVE-2025-38204",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38204"
},
{
"name": "CVE-2021-40812",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40812"
},
{
"name": "CVE-2021-4217",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4217"
},
{
"name": "CVE-2023-32643",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32643"
},
{
"name": "CVE-2023-27537",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27537"
},
{
"name": "CVE-2025-22015",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22015"
},
{
"name": "CVE-2025-53066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53066"
},
{
"name": "CVE-2023-5678",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5678"
},
{
"name": "CVE-2024-2961",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2961"
},
{
"name": "CVE-2025-21962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21962"
},
{
"name": "CVE-2025-29786",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29786"
},
{
"name": "CVE-2025-21832",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21832"
},
{
"name": "CVE-2024-12133",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12133"
},
{
"name": "CVE-2024-24784",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24784"
},
{
"name": "CVE-2022-27780",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27780"
},
{
"name": "CVE-2018-9135",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9135"
},
{
"name": "CVE-2025-38410",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38410"
},
{
"name": "CVE-2025-21790",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21790"
},
{
"name": "CVE-2024-52316",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52316"
},
{
"name": "CVE-2024-21217",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21217"
},
{
"name": "CVE-2021-39212",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39212"
},
{
"name": "CVE-2024-28182",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28182"
},
{
"name": "CVE-2024-58014",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58014"
},
{
"name": "CVE-2025-21680",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21680"
},
{
"name": "CVE-2025-0167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0167"
},
{
"name": "CVE-2017-12433",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12433"
},
{
"name": "CVE-2025-21924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21924"
},
{
"name": "CVE-2021-3574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3574"
},
{
"name": "CVE-2023-6597",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6597"
},
{
"name": "CVE-2024-20952",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20952"
},
{
"name": "CVE-2022-21541",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21541"
},
{
"name": "CVE-2025-22227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22227"
},
{
"name": "CVE-2025-47273",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
},
{
"name": "CVE-2025-27221",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27221"
},
{
"name": "CVE-2024-24789",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24789"
},
{
"name": "CVE-2024-58006",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58006"
},
{
"name": "CVE-2025-21710",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21710"
},
{
"name": "CVE-2022-21360",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21360"
},
{
"name": "CVE-2025-22088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22088"
},
{
"name": "CVE-2025-38460",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38460"
},
{
"name": "CVE-2022-27664",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27664"
},
{
"name": "CVE-2022-25858",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25858"
},
{
"name": "CVE-2022-21296",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21296"
},
{
"name": "CVE-2022-48303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48303"
},
{
"name": "CVE-2025-38345",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38345"
},
{
"name": "CVE-2022-21540",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21540"
},
{
"name": "CVE-2025-21815",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21815"
},
{
"name": "CVE-2025-50083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50083"
},
{
"name": "CVE-2024-37371",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37371"
},
{
"name": "CVE-2017-6836",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6836"
},
{
"name": "CVE-2021-3500",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3500"
},
{
"name": "CVE-2022-25310",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25310"
},
{
"name": "CVE-2023-38545",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38545"
},
{
"name": "CVE-2021-43618",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43618"
},
{
"name": "CVE-2021-20251",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20251"
},
{
"name": "CVE-2025-21669",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21669"
},
{
"name": "CVE-2016-1000027",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1000027"
},
{
"name": "CVE-2021-33621",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33621"
},
{
"name": "CVE-2025-57807",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-57807"
},
{
"name": "CVE-2025-38231",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38231"
},
{
"name": "CVE-2022-26488",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26488"
},
{
"name": "CVE-2025-21716",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21716"
},
{
"name": "CVE-2024-49761",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49761"
},
{
"name": "CVE-2024-6345",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
},
{
"name": "CVE-2025-3777",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3777"
},
{
"name": "CVE-2025-21964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21964"
},
{
"name": "CVE-2024-0567",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0567"
},
{
"name": "CVE-2018-18384",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18384"
},
{
"name": "CVE-2024-58080",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58080"
},
{
"name": "CVE-2025-21744",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21744"
},
{
"name": "CVE-2024-21208",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21208"
},
{
"name": "CVE-2023-32665",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32665"
},
{
"name": "CVE-2025-31498",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31498"
},
{
"name": "CVE-2022-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30698"
},
{
"name": "CVE-2023-31438",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31438"
},
{
"name": "CVE-2024-57986",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57986"
},
{
"name": "CVE-2021-37750",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37750"
},
{
"name": "CVE-2025-3576",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3576"
},
{
"name": "CVE-2023-23916",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23916"
},
{
"name": "CVE-2021-20244",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20244"
},
{
"name": "CVE-2025-38181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38181"
},
{
"name": "CVE-2025-21835",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21835"
},
{
"name": "CVE-2025-38391",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38391"
},
{
"name": "CVE-2025-11411",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11411"
},
{
"name": "CVE-2020-14577",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14577"
},
{
"name": "CVE-2022-3570",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3570"
},
{
"name": "CVE-2016-9844",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9844"
},
{
"name": "CVE-2019-13136",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13136"
},
{
"name": "CVE-2025-49014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49014"
},
{
"name": "CVE-2021-36222",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36222"
},
{
"name": "CVE-2021-3941",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3941"
},
{
"name": "CVE-2022-0561",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0561"
},
{
"name": "CVE-2024-6923",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6923"
},
{
"name": "CVE-2025-21811",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21811"
},
{
"name": "CVE-2024-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8088"
},
{
"name": "CVE-2025-48734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48734"
},
{
"name": "CVE-2025-11226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11226"
}
],
"initial_release_date": "2025-11-06T00:00:00",
"last_revision_date": "2025-11-06T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0969",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-11-06T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits VMware. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36320",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36320"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36423",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36423"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2022-19",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36364"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36351"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36424",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36424"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36412",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36412"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36388",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36388"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36426",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36426"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36411",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36411"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36357",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36357"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36408",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36408"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36349",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36349"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36414",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36414"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36397",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36397"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36389",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36389"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36398",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36398"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36380",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36380"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-41",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36407"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36362",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36362"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36413",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36413"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36384",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36384"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36379",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36379"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36400",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36400"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36377",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36377"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36368",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36368"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36418",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36418"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36420",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36420"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36391",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36391"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36392",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36392"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36353",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36353"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-14",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36356"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36422",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36422"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36381",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36381"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36421",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36421"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36416",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36416"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-86",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36415"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36403",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36403"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36347",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36347"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36383",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36383"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36410",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36410"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36352",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36352"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36394",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36394"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36354",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36354"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36399",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36399"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36350"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36419",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36419"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-85",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36401"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2022-19",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36365"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36405",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36405"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2018-27",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36367"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36395",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36395"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36387",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36387"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36363",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36363"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36385",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36385"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36409",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36409"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36359"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36348",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36348"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36386",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36386"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36417",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36417"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36425",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36425"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2018-27",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36366"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2024-44",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36360"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36355",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36355"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36358"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36396",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36396"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36378",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36378"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36382",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36382"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36404",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36404"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2024-44",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36361"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36402",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36402"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36393",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36393"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36406",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36406"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36390",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36390"
}
]
}
FKIE_CVE-2024-54534
Vulnerability from fkie_nvd - Published: 2024-12-12 02:15 - Updated: 2026-04-02 19:188.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| URL | Tags | ||
|---|---|---|---|
| product-security@apple.com | https://support.apple.com/en-us/121837 | Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/121839 | Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/121843 | Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/121844 | Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/121845 | Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/121846 | Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/122372 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://seclists.org/fulldisclosure/2024/Dec/11 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://seclists.org/fulldisclosure/2024/Dec/13 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://seclists.org/fulldisclosure/2024/Dec/5 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://seclists.org/fulldisclosure/2024/Dec/7 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://seclists.org/fulldisclosure/2025/Apr/5 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20250418-0002/ |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
"matchCriteriaId": "12581F66-E5CF-4B04-A94C-E56DE31D0B62",
"versionEndExcluding": "18.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"matchCriteriaId": "61B67D76-E2DA-46D7-9E43-4E18D542AA57",
"versionEndExcluding": "18.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"matchCriteriaId": "02BF92BD-305C-46CA-8A77-C247AF8B1BC0",
"versionEndExcluding": "18.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3750AD63-B023-44CE-B44D-A90F98E3A8C0",
"versionEndExcluding": "15.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3B719BB6-424F-4612-8809-0DF25022C29C",
"versionEndExcluding": "18.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "16F83EAF-2879-4515-BC44-6AE5006D35EE",
"versionEndExcluding": "2.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8C446885-2BC5-454D-88A1-146B17C051C3",
"versionEndExcluding": "11.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption."
},
{
"lang": "es",
"value": "El problema se solucion\u00f3 mejorando el manejo de la memoria. Este problema se solucion\u00f3 en watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 y iPadOS 18.2. El procesamiento de contenido web creado con fines malintencionados puede provocar da\u00f1os en la memoria."
}
],
"id": "CVE-2024-54534",
"lastModified": "2026-04-02T19:18:51.217",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2024-12-12T02:15:32.297",
"references": [
{
"source": "product-security@apple.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/121837"
},
{
"source": "product-security@apple.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/121839"
},
{
"source": "product-security@apple.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/121843"
},
{
"source": "product-security@apple.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/121844"
},
{
"source": "product-security@apple.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/121845"
},
{
"source": "product-security@apple.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/121846"
},
{
"source": "product-security@apple.com",
"url": "https://support.apple.com/en-us/122372"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://seclists.org/fulldisclosure/2024/Dec/11"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://seclists.org/fulldisclosure/2024/Dec/13"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://seclists.org/fulldisclosure/2024/Dec/5"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://seclists.org/fulldisclosure/2024/Dec/7"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://seclists.org/fulldisclosure/2025/Apr/5"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.netapp.com/advisory/ntap-20250418-0002/"
}
],
"sourceIdentifier": "product-security@apple.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
GHSA-83G6-WM8C-3HX9
Vulnerability from github – Published: 2024-12-12 03:33 – Updated: 2026-04-02 21:32The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.
{
"affected": [],
"aliases": [
"CVE-2024-54534"
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:32Z",
"severity": "CRITICAL"
},
"details": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.",
"id": "GHSA-83g6-wm8c-3hx9",
"modified": "2026-04-02T21:32:04Z",
"published": "2024-12-12T03:33:07Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250418-0002"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121837"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121839"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121843"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121844"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121845"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121846"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122372"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Dec/11"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Dec/13"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Dec/5"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Dec/7"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2025/Apr/5"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
NCSC-2024-0487
Vulnerability from csaf_ncscnl - Published: 2024-12-12 10:30 - Updated: 2024-12-12 10:30| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— | |
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— | |
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— | |
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— | |
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— | |
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— | |
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— | |
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ios_and_ipados
apple
|
cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*
|
— | |
|
ios
apple
|
cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*
|
— | |
|
ipados
apple
|
cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*
|
— |
| URL | Category |
|---|---|
| https://support.apple.com/en-us/121838 | external |
| https://support.apple.com/en-us/121837 | external |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Apple heeft kwetsbaarheden verholpen in iPadOS (Specifiek voor versies 17.7.3 en 18.2) en iOS (Specifiek voor 18.2).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten onder andere een denial-of-service probleem, logica-issues die ongeautoriseerde privilege-escalatie mogelijk maakten, en onverwachte systeemterminaties door geheugen-corruptie. Deze kwetsbaarheden konden worden misbruikt door kwaadwillenden via het verwerken van kwaadwillig vervaardigde bestanden, webinhoud of afbeeldingen. De updates verbeteren de algehele stabiliteit en beveiliging van de systemen door verbeterde geheugenbeheertechnieken en validatiecontroles te implementeren.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "general",
"text": "CWE-265",
"title": "CWE-265"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "CWE-275",
"title": "CWE-275"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/121838"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/121837"
}
],
"title": "Kwetsbaarheden verholpen in Apple iPadOS en iOS",
"tracking": {
"current_release_date": "2024-12-12T10:30:17.550009Z",
"id": "NCSC-2024-0487",
"initial_release_date": "2024-12-12T10:30:17.550009Z",
"revision_history": [
{
"date": "2024-12-12T10:30:17.550009Z",
"number": "0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "ios_and_ipados",
"product": {
"name": "ios_and_ipados",
"product_id": "CSAFPID-551327",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ipados",
"product": {
"name": "ipados",
"product_id": "CSAFPID-1691048",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:ipados:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ios",
"product": {
"name": "ios",
"product_id": "CSAFPID-548768",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:ios:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "apple"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-44201",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44201",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44201.json"
}
],
"title": "CVE-2024-44201"
},
{
"cve": "CVE-2024-44225",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44225",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44225.json"
}
],
"title": "CVE-2024-44225"
},
{
"cve": "CVE-2024-44245",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44245",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44245.json"
}
],
"title": "CVE-2024-44245"
},
{
"cve": "CVE-2024-44246",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44246",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44246.json"
}
],
"title": "CVE-2024-44246"
},
{
"cve": "CVE-2024-45490",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "other",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "other",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45490",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45490.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1691048",
"CSAFPID-548768"
]
}
],
"title": "CVE-2024-45490"
},
{
"cve": "CVE-2024-54479",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54479",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54479.json"
}
],
"title": "CVE-2024-54479"
},
{
"cve": "CVE-2024-54485",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54485",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54485.json"
}
],
"title": "CVE-2024-54485"
},
{
"cve": "CVE-2024-54486",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54486",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54486.json"
}
],
"title": "CVE-2024-54486"
},
{
"cve": "CVE-2024-54492",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54492",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54492.json"
}
],
"title": "CVE-2024-54492"
},
{
"cve": "CVE-2024-54494",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54494",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54494.json"
}
],
"title": "CVE-2024-54494"
},
{
"cve": "CVE-2024-54500",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54500",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54500.json"
}
],
"title": "CVE-2024-54500"
},
{
"cve": "CVE-2024-54501",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54501",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54501.json"
}
],
"title": "CVE-2024-54501"
},
{
"cve": "CVE-2024-54502",
"product_status": {
"known_affected": [
"CSAFPID-551327",
"CSAFPID-548768",
"CSAFPID-1691048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54502",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54502.json"
}
],
"title": "CVE-2024-54502"
},
{
"cve": "CVE-2024-54503",
"product_status": {
"known_affected": [
"CSAFPID-551327",
"CSAFPID-548768",
"CSAFPID-1691048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54503",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54503.json"
}
],
"title": "CVE-2024-54503"
},
{
"cve": "CVE-2024-54505",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54505",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54505.json"
}
],
"title": "CVE-2024-54505"
},
{
"cve": "CVE-2024-54508",
"product_status": {
"known_affected": [
"CSAFPID-551327",
"CSAFPID-548768",
"CSAFPID-1691048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54508",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54508.json"
}
],
"title": "CVE-2024-54508"
},
{
"cve": "CVE-2024-54510",
"product_status": {
"known_affected": [
"CSAFPID-1691048",
"CSAFPID-551327",
"CSAFPID-548768"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54510",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54510.json"
}
],
"title": "CVE-2024-54510"
},
{
"cve": "CVE-2024-54513",
"cwe": {
"id": "CWE-275",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-275",
"title": "CWE-275"
}
],
"product_status": {
"known_affected": [
"CSAFPID-551327",
"CSAFPID-548768",
"CSAFPID-1691048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54513",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54513.json"
}
],
"title": "CVE-2024-54513"
},
{
"cve": "CVE-2024-54514",
"cwe": {
"id": "CWE-265",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-265",
"title": "CWE-265"
}
],
"product_status": {
"known_affected": [
"CSAFPID-551327",
"CSAFPID-548768",
"CSAFPID-1691048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54514",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54514.json"
}
],
"title": "CVE-2024-54514"
},
{
"cve": "CVE-2024-54526",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-551327",
"CSAFPID-548768",
"CSAFPID-1691048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54526",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54526.json"
}
],
"title": "CVE-2024-54526"
},
{
"cve": "CVE-2024-54527",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-551327",
"CSAFPID-548768",
"CSAFPID-1691048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54527",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54527.json"
}
],
"title": "CVE-2024-54527"
},
{
"cve": "CVE-2024-54534",
"product_status": {
"known_affected": [
"CSAFPID-551327",
"CSAFPID-548768",
"CSAFPID-1691048"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54534",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54534.json"
}
],
"title": "CVE-2024-54534"
}
]
}
NCSC-2024-0488
Vulnerability from csaf_ncscnl - Published: 2024-12-12 10:31 - Updated: 2024-12-12 10:31| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_ventura
apple
|
cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*
|
— | |
|
macos_sonoma
apple
|
cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
macos
apple
|
cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*
|
— | |
|
macos_sequoia
apple
|
cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*
|
— |
| URL | Category |
|---|---|
| https://support.apple.com/en-us/121839 | external |
| https://support.apple.com/en-us/121840 | external |
| https://support.apple.com/en-us/121842 | external |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2023… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Apple heeft kwetsbaarheden verholpen in macOS Sequoia 15.2, Ventura 13.7.2, en Sonoma 14.7.2.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten onder andere een use-after-free kwetsbaarheid die kon leiden tot onverwachte applicatie-terminatie of willekeurige code-executie, en logica-issues die het mogelijk maakten dat applicaties beschermde delen van het bestandssysteem konden wijzigen. Daarnaast zijn er verbeteringen doorgevoerd in het geheugenbeheer om de stabiliteit en beveiliging van de systemen te waarborgen.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "general",
"text": "CWE-371",
"title": "CWE-371"
},
{
"category": "general",
"text": "CWE-265",
"title": "CWE-265"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "CWE-275",
"title": "CWE-275"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/121839"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/121840"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/121842"
}
],
"title": "Kwetsbaarheden verholpen in macOS",
"tracking": {
"current_release_date": "2024-12-12T10:31:34.869451Z",
"id": "NCSC-2024-0488",
"initial_release_date": "2024-12-12T10:31:34.869451Z",
"revision_history": [
{
"date": "2024-12-12T10:31:34.869451Z",
"number": "0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "macos_sequoia",
"product": {
"name": "macos_sequoia",
"product_id": "CSAFPID-1741956",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:macos_sequoia:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "macos_sonoma",
"product": {
"name": "macos_sonoma",
"product_id": "CSAFPID-1741955",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:macos_sonoma:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "macos_ventura",
"product": {
"name": "macos_ventura",
"product_id": "CSAFPID-1741954",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:macos_ventura:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "macos",
"product": {
"name": "macos",
"product_id": "CSAFPID-548770",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "apple"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-32395",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2023-32395",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32395.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
}
],
"title": "CVE-2023-32395"
},
{
"cve": "CVE-2024-44201",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44201",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44201.json"
}
],
"title": "CVE-2024-44201"
},
{
"cve": "CVE-2024-44220",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44220",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44220.json"
}
],
"title": "CVE-2024-44220"
},
{
"cve": "CVE-2024-44224",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44224",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44224.json"
}
],
"title": "CVE-2024-44224"
},
{
"cve": "CVE-2024-44225",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44225",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44225.json"
}
],
"title": "CVE-2024-44225"
},
{
"cve": "CVE-2024-44243",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44243",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44243.json"
}
],
"title": "CVE-2024-44243"
},
{
"cve": "CVE-2024-44245",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44245",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44245.json"
}
],
"title": "CVE-2024-44245"
},
{
"cve": "CVE-2024-44246",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44246",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44246.json"
}
],
"title": "CVE-2024-44246"
},
{
"cve": "CVE-2024-44248",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44248",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44248.json"
}
],
"title": "CVE-2024-44248"
},
{
"cve": "CVE-2024-44291",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44291",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44291.json"
}
],
"title": "CVE-2024-44291"
},
{
"cve": "CVE-2024-44300",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-44300",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44300.json"
}
],
"title": "CVE-2024-44300"
},
{
"cve": "CVE-2024-45490",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "other",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "other",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45490",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45490.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
}
],
"title": "CVE-2024-45490"
},
{
"cve": "CVE-2024-54465",
"cwe": {
"id": "CWE-371",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-371",
"title": "CWE-371"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54465",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54465.json"
}
],
"title": "CVE-2024-54465"
},
{
"cve": "CVE-2024-54466",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54466",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54466.json"
}
],
"title": "CVE-2024-54466"
},
{
"cve": "CVE-2024-54474",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54474",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54474.json"
}
],
"title": "CVE-2024-54474"
},
{
"cve": "CVE-2024-54476",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54476",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54476.json"
}
],
"title": "CVE-2024-54476"
},
{
"cve": "CVE-2024-54477",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54477",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54477.json"
}
],
"title": "CVE-2024-54477"
},
{
"cve": "CVE-2024-54479",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54479",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54479.json"
}
],
"title": "CVE-2024-54479"
},
{
"cve": "CVE-2024-54484",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54484",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54484.json"
}
],
"title": "CVE-2024-54484"
},
{
"cve": "CVE-2024-54486",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54486",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54486.json"
}
],
"title": "CVE-2024-54486"
},
{
"cve": "CVE-2024-54489",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54489",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54489.json"
}
],
"title": "CVE-2024-54489"
},
{
"cve": "CVE-2024-54490",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54490",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54490.json"
}
],
"title": "CVE-2024-54490"
},
{
"cve": "CVE-2024-54491",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54491",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54491.json"
}
],
"title": "CVE-2024-54491"
},
{
"cve": "CVE-2024-54492",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54492",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54492.json"
}
],
"title": "CVE-2024-54492"
},
{
"cve": "CVE-2024-54493",
"cwe": {
"id": "CWE-371",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-371",
"title": "CWE-371"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54493",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54493.json"
}
],
"title": "CVE-2024-54493"
},
{
"cve": "CVE-2024-54494",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54494",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54494.json"
}
],
"title": "CVE-2024-54494"
},
{
"cve": "CVE-2024-54495",
"cwe": {
"id": "CWE-275",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-275",
"title": "CWE-275"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54495",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54495.json"
}
],
"title": "CVE-2024-54495"
},
{
"cve": "CVE-2024-54498",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54498",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54498.json"
}
],
"title": "CVE-2024-54498"
},
{
"cve": "CVE-2024-54500",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54500",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54500.json"
}
],
"title": "CVE-2024-54500"
},
{
"cve": "CVE-2024-54501",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54501",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54501.json"
}
],
"title": "CVE-2024-54501"
},
{
"cve": "CVE-2024-54502",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54502",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54502.json"
}
],
"title": "CVE-2024-54502"
},
{
"cve": "CVE-2024-54504",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54504",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54504.json"
}
],
"title": "CVE-2024-54504"
},
{
"cve": "CVE-2024-54505",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54505",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54505.json"
}
],
"title": "CVE-2024-54505"
},
{
"cve": "CVE-2024-54506",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54506",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54506.json"
}
],
"title": "CVE-2024-54506"
},
{
"cve": "CVE-2024-54508",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54508",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54508.json"
}
],
"title": "CVE-2024-54508"
},
{
"cve": "CVE-2024-54510",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54510",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54510.json"
}
],
"title": "CVE-2024-54510"
},
{
"cve": "CVE-2024-54513",
"cwe": {
"id": "CWE-275",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-275",
"title": "CWE-275"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54513",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54513.json"
}
],
"title": "CVE-2024-54513"
},
{
"cve": "CVE-2024-54514",
"cwe": {
"id": "CWE-265",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-265",
"title": "CWE-265"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54514",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54514.json"
}
],
"title": "CVE-2024-54514"
},
{
"cve": "CVE-2024-54515",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54515",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54515.json"
}
],
"title": "CVE-2024-54515"
},
{
"cve": "CVE-2024-54524",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54524",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54524.json"
}
],
"title": "CVE-2024-54524"
},
{
"cve": "CVE-2024-54526",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54526",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54526.json"
}
],
"title": "CVE-2024-54526"
},
{
"cve": "CVE-2024-54527",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54527",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54527.json"
}
],
"title": "CVE-2024-54527"
},
{
"cve": "CVE-2024-54528",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54528",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54528.json"
}
],
"title": "CVE-2024-54528"
},
{
"cve": "CVE-2024-54529",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741954",
"CSAFPID-1741955",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54529",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54529.json"
}
],
"title": "CVE-2024-54529"
},
{
"cve": "CVE-2024-54531",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
}
],
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54531",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54531.json"
}
],
"title": "CVE-2024-54531"
},
{
"cve": "CVE-2024-54534",
"product_status": {
"known_affected": [
"CSAFPID-548770",
"CSAFPID-1741956"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54534",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54534.json"
}
],
"title": "CVE-2024-54534"
}
]
}
NCSC-2025-0103
Vulnerability from csaf_ncscnl - Published: 2025-04-01 08:42 - Updated: 2025-04-01 08:42| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:apple/16.7.11
Apple / iOS
|
vers:apple/16.7.11 | ||
|
vers:apple/18.2
Apple / iOS
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / iOS
|
vers:apple/18.3 | ||
|
vers:apple/18.3.2
Apple / iOS
|
vers:apple/18.3.2 | ||
|
vers:apple/18.4
Apple / iOS
|
vers:apple/18.4 | ||
|
vers:unknown/<18.2
Apple / iOS
|
vers:unknown/<18.2 | ||
|
vers:unknown/<18.3
Apple / iOS
|
vers:unknown/<18.3 | ||
|
vers:unknown/<18.3.1
Apple / iOS
|
vers:unknown/<18.3.1 | ||
|
vers:unknown/<18.3.2
Apple / iOS
|
vers:unknown/<18.3.2 | ||
|
vers:unknown/unknown
Apple / iOS and iPadOS
|
vers:unknown/unknown | ||
|
vers:unknown/unspecified|<18.2
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.2 | ||
|
vers:unknown/unspecified|<18.3
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.3 | ||
|
vers:unknown/unspecified|<18.4
Apple / iOS and iPadOS
|
vers:unknown/unspecified|<18.4 | ||
|
vers:apple/15.8.4
Apple / iOS
|
vers:apple/15.8.4 | ||
|
vers:unknown/15.0
Apple / iPhone OS
|
cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
|
vers:unknown/15.0 | |
|
vers:unknown/15.1
Apple / iPhone OS
|
vers:unknown/15.1 | ||
|
vers:unknown/15.2
Apple / iPhone OS
|
vers:unknown/15.2 | ||
|
vers:unknown/15.3
Apple / iPhone OS
|
vers:unknown/15.3 | ||
|
vers:unknown/15.4
Apple / iPhone OS
|
vers:unknown/15.4 | ||
|
vers:unknown/15.5
Apple / iPhone OS
|
vers:unknown/15.5 | ||
|
vers:unknown/15.6
Apple / iPhone OS
|
vers:unknown/15.6 | ||
|
vers:unknown/15.7
Apple / iPhone OS
|
vers:unknown/15.7 | ||
|
vers:unknown/15.8
Apple / iPhone OS
|
vers:unknown/15.8 | ||
|
vers:unknown/15.8.1
Apple / iPhone OS
|
vers:unknown/15.8.1 | ||
|
vers:unknown/16.0
Apple / iPhone OS
|
vers:unknown/16.0 | ||
|
vers:unknown/16.1
Apple / iPhone OS
|
vers:unknown/16.1 | ||
|
vers:unknown/16.2
Apple / iPhone OS
|
vers:unknown/16.2 | ||
|
vers:unknown/16.3
Apple / iPhone OS
|
vers:unknown/16.3 | ||
|
vers:unknown/16.4
Apple / iPhone OS
|
vers:unknown/16.4 | ||
|
vers:unknown/16.5
Apple / iPhone OS
|
vers:unknown/16.5 | ||
|
vers:unknown/16.6
Apple / iPhone OS
|
vers:unknown/16.6 | ||
|
vers:unknown/16.7
Apple / iPhone OS
|
vers:unknown/16.7 | ||
|
vers:unknown/17.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*
|
vers:unknown/17.0 | |
|
vers:unknown/17.1
Apple / iPhone OS
|
vers:unknown/17.1 | ||
|
vers:unknown/17.2
Apple / iPhone OS
|
vers:unknown/17.2 | ||
|
vers:unknown/17.3
Apple / iPhone OS
|
vers:unknown/17.3 | ||
|
vers:unknown/17.4
Apple / iPhone OS
|
vers:unknown/17.4 | ||
|
vers:unknown/17.5
Apple / iPhone OS
|
vers:unknown/17.5 | ||
|
vers:unknown/17.6
Apple / iPhone OS
|
vers:unknown/17.6 | ||
|
vers:unknown/17.7
Apple / iPhone OS
|
vers:unknown/17.7 | ||
|
vers:apple/18.2
Apple / Apple / Iphone Os
|
vers:apple/18.2 | ||
|
vers:apple/18.3
Apple / Apple / Iphone Os
|
vers:apple/18.3 | ||
|
vers:unknown/18.0
Apple / iPhone OS
|
cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*
|
vers:unknown/18.0 | |
|
vers:unknown/18.1
Apple / iPhone OS
|
vers:unknown/18.1 | ||
|
vers:unknown/18.2
Apple / iPhone OS
|
vers:unknown/18.2 | ||
|
vers:unknown/18.3
Apple / iPhone OS
|
vers:unknown/18.3 |
| URL | Category |
|---|---|
| https://support.apple.com/en-us/122345 | external |
| https://support.apple.com/en-us/122346 | external |
| https://support.apple.com/en-us/122372 | external |
| https://support.apple.com/en-us/122371 | external |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Apple heeft meerdere kwetsbaarheden verholpen in iOS en iPadOS.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten onder andere geheugenbeheerproblemen, ongeautoriseerde toegang tot gevoelige gebruikersdata, en de mogelijkheid voor applicaties om hun sandbox-omgevingen te ontsnappen. Deze kwetsbaarheden konden leiden tot ongeautoriseerde toegang, gegevenswijzigingen, of zelfs Denial-of-Service. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren of link te volgen.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Comparison Using Wrong Factors",
"title": "CWE-1025"
},
{
"category": "general",
"text": "Incorrect Comparison",
"title": "CWE-697"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Incorrect Default Permissions",
"title": "CWE-276"
},
{
"category": "general",
"text": "CWE-275",
"title": "CWE-275"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://support.apple.com/en-us/122345"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://support.apple.com/en-us/122346"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/122372"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/122371"
}
],
"title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
"tracking": {
"current_release_date": "2025-04-01T08:42:27.059536Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0103",
"initial_release_date": "2025-04-01T08:42:27.059536Z",
"revision_history": [
{
"date": "2025-04-01T08:42:27.059536Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:apple/16.7.11",
"product": {
"name": "vers:apple/16.7.11",
"product_id": "CSAFPID-2588450"
}
},
{
"category": "product_version_range",
"name": "vers:apple/18.2",
"product": {
"name": "vers:apple/18.2",
"product_id": "CSAFPID-1432307"
}
},
{
"category": "product_version_range",
"name": "vers:apple/18.3",
"product": {
"name": "vers:apple/18.3",
"product_id": "CSAFPID-1902947"
}
},
{
"category": "product_version_range",
"name": "vers:apple/18.3.2",
"product": {
"name": "vers:apple/18.3.2",
"product_id": "CSAFPID-2462478"
}
},
{
"category": "product_version_range",
"name": "vers:apple/18.4",
"product": {
"name": "vers:apple/18.4",
"product_id": "CSAFPID-2588454"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003c18.2",
"product": {
"name": "vers:unknown/\u003c18.2",
"product_id": "CSAFPID-1436912"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003c18.3",
"product": {
"name": "vers:unknown/\u003c18.3",
"product_id": "CSAFPID-1904380"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003c18.3.1",
"product": {
"name": "vers:unknown/\u003c18.3.1",
"product_id": "CSAFPID-2177846"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003c18.3.2",
"product": {
"name": "vers:unknown/\u003c18.3.2",
"product_id": "CSAFPID-2469033"
}
},
{
"category": "product_version_range",
"name": "vers:apple/15.8.4",
"product": {
"name": "vers:apple/15.8.4",
"product_id": "CSAFPID-2588452"
}
}
],
"category": "product_name",
"name": "iOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1332226"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/unspecified|\u003c18.2",
"product": {
"name": "vers:unknown/unspecified|\u003c18.2",
"product_id": "CSAFPID-1432291"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/unspecified|\u003c18.3",
"product": {
"name": "vers:unknown/unspecified|\u003c18.3",
"product_id": "CSAFPID-1901367"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/unspecified|\u003c18.4",
"product": {
"name": "vers:unknown/unspecified|\u003c18.4",
"product_id": "CSAFPID-2590080"
}
}
],
"category": "product_name",
"name": "iOS and iPadOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/15.0",
"product": {
"name": "vers:unknown/15.0",
"product_id": "CSAFPID-90190",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.1",
"product": {
"name": "vers:unknown/15.1",
"product_id": "CSAFPID-90119"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.2",
"product": {
"name": "vers:unknown/15.2",
"product_id": "CSAFPID-90182"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.3",
"product": {
"name": "vers:unknown/15.3",
"product_id": "CSAFPID-773820"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.4",
"product": {
"name": "vers:unknown/15.4",
"product_id": "CSAFPID-90174"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.5",
"product": {
"name": "vers:unknown/15.5",
"product_id": "CSAFPID-90216"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.6",
"product": {
"name": "vers:unknown/15.6",
"product_id": "CSAFPID-90200"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.7",
"product": {
"name": "vers:unknown/15.7",
"product_id": "CSAFPID-90232"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.8",
"product": {
"name": "vers:unknown/15.8",
"product_id": "CSAFPID-90303"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/15.8.1",
"product": {
"name": "vers:unknown/15.8.1",
"product_id": "CSAFPID-821264"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/16.0",
"product": {
"name": "vers:unknown/16.0",
"product_id": "CSAFPID-90255"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/16.1",
"product": {
"name": "vers:unknown/16.1",
"product_id": "CSAFPID-90236"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/16.2",
"product": {
"name": "vers:unknown/16.2",
"product_id": "CSAFPID-90241"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/16.3",
"product": {
"name": "vers:unknown/16.3",
"product_id": "CSAFPID-90305"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/16.4",
"product": {
"name": "vers:unknown/16.4",
"product_id": "CSAFPID-90301"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/16.5",
"product": {
"name": "vers:unknown/16.5",
"product_id": "CSAFPID-90297"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/16.6",
"product": {
"name": "vers:unknown/16.6",
"product_id": "CSAFPID-90295"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/16.7",
"product": {
"name": "vers:unknown/16.7",
"product_id": "CSAFPID-90291"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.0",
"product": {
"name": "vers:unknown/17.0",
"product_id": "CSAFPID-90302",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:iphone_os:17.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.1",
"product": {
"name": "vers:unknown/17.1",
"product_id": "CSAFPID-90306"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.2",
"product": {
"name": "vers:unknown/17.2",
"product_id": "CSAFPID-90307"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.3",
"product": {
"name": "vers:unknown/17.3",
"product_id": "CSAFPID-90308"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.4",
"product": {
"name": "vers:unknown/17.4",
"product_id": "CSAFPID-1077909"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.5",
"product": {
"name": "vers:unknown/17.5",
"product_id": "CSAFPID-1136180"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.6",
"product": {
"name": "vers:unknown/17.6",
"product_id": "CSAFPID-1136554"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.7",
"product": {
"name": "vers:unknown/17.7",
"product_id": "CSAFPID-1136185"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/18.0",
"product": {
"name": "vers:unknown/18.0",
"product_id": "CSAFPID-1161343",
"product_identification_helper": {
"cpe": "cpe:2.3:a:apple:iphone_os:18.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/18.1",
"product": {
"name": "vers:unknown/18.1",
"product_id": "CSAFPID-1443657"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/18.2",
"product": {
"name": "vers:unknown/18.2",
"product_id": "CSAFPID-1906294"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/18.3",
"product": {
"name": "vers:unknown/18.3",
"product_id": "CSAFPID-1987760"
}
}
],
"category": "product_name",
"name": "iPhone OS"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:apple/18.2",
"product": {
"name": "vers:apple/18.2",
"product_id": "CSAFPID-1618595"
}
},
{
"category": "product_version_range",
"name": "vers:apple/18.3",
"product": {
"name": "vers:apple/18.3",
"product_id": "CSAFPID-1915327"
}
}
],
"category": "product_name",
"name": "Iphone Os"
}
],
"category": "product_family",
"name": "Apple"
}
],
"category": "vendor",
"name": "Apple"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-24217",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24217",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24217.json"
}
],
"title": "CVE-2025-24217"
},
{
"cve": "CVE-2025-24221",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24221",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24221.json"
}
],
"title": "CVE-2025-24221"
},
{
"cve": "CVE-2025-24230",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24230",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24230.json"
}
],
"title": "CVE-2025-24230"
},
{
"cve": "CVE-2025-24237",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24237",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24237.json"
}
],
"title": "CVE-2025-24237"
},
{
"cve": "CVE-2025-24238",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"notes": [
{
"category": "other",
"text": "Incorrect Default Permissions",
"title": "CWE-276"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24238",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24238.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-24238"
},
{
"cve": "CVE-2025-24243",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24243",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24243.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-24243"
},
{
"cve": "CVE-2025-24244",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24244",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24244.json"
}
],
"title": "CVE-2025-24244"
},
{
"cve": "CVE-2025-24257",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24257",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24257.json"
}
],
"title": "CVE-2025-24257"
},
{
"cve": "CVE-2025-24264",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24264",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24264.json"
}
],
"title": "CVE-2025-24264"
},
{
"cve": "CVE-2025-24283",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24283",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24283.json"
}
],
"title": "CVE-2025-24283"
},
{
"cve": "CVE-2025-27113",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-27113",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-27113.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-27113"
},
{
"cve": "CVE-2025-30425",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30425",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30425.json"
}
],
"title": "CVE-2025-30425"
},
{
"cve": "CVE-2025-30426",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30426",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30426.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-30426"
},
{
"cve": "CVE-2025-30427",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30427",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30427.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-30427"
},
{
"cve": "CVE-2025-30428",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30428",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30428.json"
}
],
"title": "CVE-2025-30428"
},
{
"cve": "CVE-2025-30429",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30429",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30429.json"
}
],
"title": "CVE-2025-30429"
},
{
"cve": "CVE-2025-30430",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30430",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30430.json"
}
],
"title": "CVE-2025-30430"
},
{
"cve": "CVE-2025-30432",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30432",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30432.json"
}
],
"title": "CVE-2025-30432"
},
{
"cve": "CVE-2025-30433",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30433",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30433.json"
}
],
"title": "CVE-2025-30433"
},
{
"cve": "CVE-2025-30434",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30434",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30434.json"
}
],
"title": "CVE-2025-30434"
},
{
"cve": "CVE-2025-30438",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30438",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30438.json"
}
],
"title": "CVE-2025-30438"
},
{
"cve": "CVE-2025-30439",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30439",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30439.json"
}
],
"title": "CVE-2025-30439"
},
{
"cve": "CVE-2025-30447",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30447",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30447.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-30447"
},
{
"cve": "CVE-2025-30454",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30454",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30454.json"
}
],
"title": "CVE-2025-30454"
},
{
"cve": "CVE-2025-30456",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30456",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30456.json"
}
],
"title": "CVE-2025-30456"
},
{
"cve": "CVE-2025-30463",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30463",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30463.json"
}
],
"title": "CVE-2025-30463"
},
{
"cve": "CVE-2025-30465",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30465",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30465.json"
}
],
"title": "CVE-2025-30465"
},
{
"cve": "CVE-2025-30467",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30467",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30467.json"
}
],
"title": "CVE-2025-30467"
},
{
"cve": "CVE-2025-30469",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30469",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30469.json"
}
],
"title": "CVE-2025-30469"
},
{
"cve": "CVE-2025-30470",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30470",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30470.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-30470"
},
{
"cve": "CVE-2025-30471",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30471",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30471.json"
}
],
"title": "CVE-2025-30471"
},
{
"cve": "CVE-2025-31182",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31182",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31182.json"
}
],
"title": "CVE-2025-31182"
},
{
"cve": "CVE-2025-31183",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31183",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31183.json"
}
],
"title": "CVE-2025-31183"
},
{
"cve": "CVE-2025-31184",
"cwe": {
"id": "CWE-275",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-275",
"title": "CWE-275"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31184",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31184.json"
}
],
"title": "CVE-2025-31184"
},
{
"cve": "CVE-2025-31191",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31191",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31191.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-31191"
},
{
"cve": "CVE-2025-31192",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31192",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31192.json"
}
],
"title": "CVE-2025-31192"
},
{
"cve": "CVE-2024-9681",
"cwe": {
"id": "CWE-1025",
"name": "Comparison Using Wrong Factors"
},
"notes": [
{
"category": "other",
"text": "Comparison Using Wrong Factors",
"title": "CWE-1025"
},
{
"category": "other",
"text": "Incorrect Comparison",
"title": "CWE-697"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-9681",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-9681.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2024-9681"
},
{
"cve": "CVE-2024-48958",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-48958",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-48958.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2024-48958"
},
{
"cve": "CVE-2024-54502",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54502",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54502.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2024-54502"
},
{
"cve": "CVE-2024-54508",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54508",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54508.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2024-54508"
},
{
"cve": "CVE-2024-54534",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54534",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54534.json"
}
],
"title": "CVE-2024-54534"
},
{
"cve": "CVE-2024-54543",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54543",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54543.json"
}
],
"title": "CVE-2024-54543"
},
{
"cve": "CVE-2024-56171",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-56171",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-56171.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2024-56171"
},
{
"cve": "CVE-2025-24085",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"notes": [
{
"category": "other",
"text": "Incorrect Default Permissions",
"title": "CWE-276"
},
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24085",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24085.json"
}
],
"title": "CVE-2025-24085"
},
{
"cve": "CVE-2025-24095",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24095",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24095.json"
}
],
"title": "CVE-2025-24095"
},
{
"cve": "CVE-2025-24097",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24097",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24097.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-24097"
},
{
"cve": "CVE-2025-24113",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24113",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24113.json"
}
],
"title": "CVE-2025-24113"
},
{
"cve": "CVE-2025-24163",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24163",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24163.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-24163"
},
{
"cve": "CVE-2025-24167",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24167",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24167.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-24167"
},
{
"cve": "CVE-2025-24173",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24173",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24173.json"
}
],
"title": "CVE-2025-24173"
},
{
"cve": "CVE-2025-24178",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24178",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24178.json"
}
],
"title": "CVE-2025-24178"
},
{
"cve": "CVE-2025-24180",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24180",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24180.json"
}
],
"title": "CVE-2025-24180"
},
{
"cve": "CVE-2025-24182",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24182",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24182.json"
}
],
"title": "CVE-2025-24182"
},
{
"cve": "CVE-2025-24190",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24190",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24190.json"
}
],
"title": "CVE-2025-24190"
},
{
"cve": "CVE-2025-24192",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24192",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24192.json"
}
],
"title": "CVE-2025-24192"
},
{
"cve": "CVE-2025-24193",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24193",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24193.json"
}
],
"title": "CVE-2025-24193"
},
{
"cve": "CVE-2025-24194",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24194",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24194.json"
}
],
"title": "CVE-2025-24194"
},
{
"cve": "CVE-2025-24198",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24198",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24198.json"
}
],
"title": "CVE-2025-24198"
},
{
"cve": "CVE-2025-24200",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24200",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24200.json"
}
],
"title": "CVE-2025-24200"
},
{
"cve": "CVE-2025-24201",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24201",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24201.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
}
],
"title": "CVE-2025-24201"
},
{
"cve": "CVE-2025-24202",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24202",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24202.json"
}
],
"title": "CVE-2025-24202"
},
{
"cve": "CVE-2025-24203",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24203",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24203.json"
}
],
"title": "CVE-2025-24203"
},
{
"cve": "CVE-2025-24205",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24205",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24205.json"
}
],
"title": "CVE-2025-24205"
},
{
"cve": "CVE-2025-24208",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24208",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24208.json"
}
],
"title": "CVE-2025-24208"
},
{
"cve": "CVE-2025-24209",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24209",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24209.json"
}
],
"title": "CVE-2025-24209"
},
{
"cve": "CVE-2025-24210",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24210",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24210.json"
}
],
"title": "CVE-2025-24210"
},
{
"cve": "CVE-2025-24211",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24211",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24211.json"
}
],
"title": "CVE-2025-24211"
},
{
"cve": "CVE-2025-24212",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24212",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24212.json"
}
],
"title": "CVE-2025-24212"
},
{
"cve": "CVE-2025-24213",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24213",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24213.json"
}
],
"title": "CVE-2025-24213"
},
{
"cve": "CVE-2025-24214",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24214",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24214.json"
}
],
"title": "CVE-2025-24214"
},
{
"cve": "CVE-2025-24215",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24215",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24215.json"
}
],
"title": "CVE-2025-24215"
},
{
"cve": "CVE-2025-24216",
"product_status": {
"known_affected": [
"CSAFPID-2588450",
"CSAFPID-1432307",
"CSAFPID-1902947",
"CSAFPID-2462478",
"CSAFPID-2588454",
"CSAFPID-1436912",
"CSAFPID-1904380",
"CSAFPID-2177846",
"CSAFPID-2469033",
"CSAFPID-1332226",
"CSAFPID-1432291",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2588452",
"CSAFPID-90190",
"CSAFPID-90119",
"CSAFPID-90182",
"CSAFPID-773820",
"CSAFPID-90174",
"CSAFPID-90216",
"CSAFPID-90200",
"CSAFPID-90232",
"CSAFPID-90303",
"CSAFPID-821264",
"CSAFPID-90255",
"CSAFPID-90236",
"CSAFPID-90241",
"CSAFPID-90305",
"CSAFPID-90301",
"CSAFPID-90297",
"CSAFPID-90295",
"CSAFPID-90291",
"CSAFPID-90302",
"CSAFPID-90306",
"CSAFPID-90307",
"CSAFPID-90308",
"CSAFPID-1077909",
"CSAFPID-1136180",
"CSAFPID-1136554",
"CSAFPID-1136185",
"CSAFPID-1618595",
"CSAFPID-1915327",
"CSAFPID-1161343",
"CSAFPID-1443657",
"CSAFPID-1906294",
"CSAFPID-1987760"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24216",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24216.json"
}
],
"title": "CVE-2025-24216"
}
]
}
NCSC-2025-0130
Vulnerability from csaf_ncscnl - Published: 2025-04-16 15:04 - Updated: 2025-04-16 15:04| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:unknown/17.0.14
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/24 | ||
|
vers:unknown/11.0.26
Oracle / Java Se
|
cpe:/a:oracle:java_se:11.0.26
|
vers:unknown/11.0.26 | |
|
vers:unknown/17.0.14
Oracle / Java Se
|
cpe:/a:oracle:java_se:17.0.14
|
vers:unknown/17.0.14 | |
|
vers:unknown/21.0.6
Oracle / Java Se
|
cpe:/a:oracle:java_se:21.0.6
|
vers:unknown/21.0.6 | |
|
vers:unknown/24
Oracle / Java Se
|
cpe:/a:oracle:java_se:24
|
vers:unknown/24 | |
|
vers:unknown/8u441
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441
|
vers:unknown/8u441 | |
|
vers:unknown/8u441
Oracle / Oracle / Java Se
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441-perf
|
vers:unknown/8u441-perf | |
|
vers:oracle/11.0.26
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*
|
vers:oracle/11.0.26 | |
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:oracle/8u441
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*
|
vers:oracle/8u441 | |
|
vers:oracle/8u441-perf
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*
|
vers:oracle/8u441-perf | |
|
vers:unknown/11.0.26
Oracle Corporation / Oracle Java SE
|
vers:unknown/11.0.26 | ||
|
vers:unknown/17.0.14
Oracle Corporation / Oracle Java SE
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle Java SE
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle Java SE
|
vers:unknown/24 | ||
|
vers:unknown/8u441
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441-perf | ||
|
vers:oracle/20.3.17
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*
|
vers:oracle/20.3.17 | |
|
vers:oracle/21.3.13
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*
|
vers:oracle/21.3.13 | |
|
vers:unknown/20.3.17
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/20.3.17 | ||
|
vers:unknown/21.3.13
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/21.3.13 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:unknown/17.0.14
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/24 | ||
|
vers:unknown/11.0.26
Oracle / Java Se
|
cpe:/a:oracle:java_se:11.0.26
|
vers:unknown/11.0.26 | |
|
vers:unknown/17.0.14
Oracle / Java Se
|
cpe:/a:oracle:java_se:17.0.14
|
vers:unknown/17.0.14 | |
|
vers:unknown/21.0.6
Oracle / Java Se
|
cpe:/a:oracle:java_se:21.0.6
|
vers:unknown/21.0.6 | |
|
vers:unknown/24
Oracle / Java Se
|
cpe:/a:oracle:java_se:24
|
vers:unknown/24 | |
|
vers:unknown/8u441
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441
|
vers:unknown/8u441 | |
|
vers:unknown/8u441
Oracle / Oracle / Java Se
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441-perf
|
vers:unknown/8u441-perf | |
|
vers:oracle/11.0.26
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*
|
vers:oracle/11.0.26 | |
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:oracle/8u441
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*
|
vers:oracle/8u441 | |
|
vers:oracle/8u441-perf
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*
|
vers:oracle/8u441-perf | |
|
vers:unknown/11.0.26
Oracle Corporation / Oracle Java SE
|
vers:unknown/11.0.26 | ||
|
vers:unknown/17.0.14
Oracle Corporation / Oracle Java SE
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle Java SE
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle Java SE
|
vers:unknown/24 | ||
|
vers:unknown/8u441
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441-perf | ||
|
vers:oracle/20.3.17
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*
|
vers:oracle/20.3.17 | |
|
vers:oracle/21.3.13
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*
|
vers:oracle/21.3.13 | |
|
vers:unknown/20.3.17
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/20.3.17 | ||
|
vers:unknown/21.3.13
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/21.3.13 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:unknown/17.0.14
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/24 | ||
|
vers:unknown/11.0.26
Oracle / Java Se
|
cpe:/a:oracle:java_se:11.0.26
|
vers:unknown/11.0.26 | |
|
vers:unknown/17.0.14
Oracle / Java Se
|
cpe:/a:oracle:java_se:17.0.14
|
vers:unknown/17.0.14 | |
|
vers:unknown/21.0.6
Oracle / Java Se
|
cpe:/a:oracle:java_se:21.0.6
|
vers:unknown/21.0.6 | |
|
vers:unknown/24
Oracle / Java Se
|
cpe:/a:oracle:java_se:24
|
vers:unknown/24 | |
|
vers:unknown/8u441
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441
|
vers:unknown/8u441 | |
|
vers:unknown/8u441
Oracle / Oracle / Java Se
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441-perf
|
vers:unknown/8u441-perf | |
|
vers:oracle/11.0.26
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*
|
vers:oracle/11.0.26 | |
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:oracle/8u441
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*
|
vers:oracle/8u441 | |
|
vers:oracle/8u441-perf
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*
|
vers:oracle/8u441-perf | |
|
vers:unknown/11.0.26
Oracle Corporation / Oracle Java SE
|
vers:unknown/11.0.26 | ||
|
vers:unknown/17.0.14
Oracle Corporation / Oracle Java SE
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle Java SE
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle Java SE
|
vers:unknown/24 | ||
|
vers:unknown/8u441
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441-perf | ||
|
vers:oracle/20.3.17
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*
|
vers:oracle/20.3.17 | |
|
vers:oracle/21.3.13
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*
|
vers:oracle/21.3.13 | |
|
vers:unknown/20.3.17
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/20.3.17 | ||
|
vers:unknown/21.3.13
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/21.3.13 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:unknown/17.0.14
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/24 | ||
|
vers:unknown/11.0.26
Oracle / Java Se
|
cpe:/a:oracle:java_se:11.0.26
|
vers:unknown/11.0.26 | |
|
vers:unknown/17.0.14
Oracle / Java Se
|
cpe:/a:oracle:java_se:17.0.14
|
vers:unknown/17.0.14 | |
|
vers:unknown/21.0.6
Oracle / Java Se
|
cpe:/a:oracle:java_se:21.0.6
|
vers:unknown/21.0.6 | |
|
vers:unknown/24
Oracle / Java Se
|
cpe:/a:oracle:java_se:24
|
vers:unknown/24 | |
|
vers:unknown/8u441
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441
|
vers:unknown/8u441 | |
|
vers:unknown/8u441
Oracle / Oracle / Java Se
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441-perf
|
vers:unknown/8u441-perf | |
|
vers:oracle/11.0.26
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*
|
vers:oracle/11.0.26 | |
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:oracle/8u441
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*
|
vers:oracle/8u441 | |
|
vers:oracle/8u441-perf
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*
|
vers:oracle/8u441-perf | |
|
vers:unknown/11.0.26
Oracle Corporation / Oracle Java SE
|
vers:unknown/11.0.26 | ||
|
vers:unknown/17.0.14
Oracle Corporation / Oracle Java SE
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle Java SE
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle Java SE
|
vers:unknown/24 | ||
|
vers:unknown/8u441
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441-perf | ||
|
vers:oracle/20.3.17
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*
|
vers:oracle/20.3.17 | |
|
vers:oracle/21.3.13
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*
|
vers:oracle/21.3.13 | |
|
vers:unknown/20.3.17
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/20.3.17 | ||
|
vers:unknown/21.3.13
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/21.3.13 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:unknown/17.0.14
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/24 | ||
|
vers:unknown/11.0.26
Oracle / Java Se
|
cpe:/a:oracle:java_se:11.0.26
|
vers:unknown/11.0.26 | |
|
vers:unknown/17.0.14
Oracle / Java Se
|
cpe:/a:oracle:java_se:17.0.14
|
vers:unknown/17.0.14 | |
|
vers:unknown/21.0.6
Oracle / Java Se
|
cpe:/a:oracle:java_se:21.0.6
|
vers:unknown/21.0.6 | |
|
vers:unknown/24
Oracle / Java Se
|
cpe:/a:oracle:java_se:24
|
vers:unknown/24 | |
|
vers:unknown/8u441
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441
|
vers:unknown/8u441 | |
|
vers:unknown/8u441
Oracle / Oracle / Java Se
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441-perf
|
vers:unknown/8u441-perf | |
|
vers:oracle/11.0.26
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*
|
vers:oracle/11.0.26 | |
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:oracle/8u441
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*
|
vers:oracle/8u441 | |
|
vers:oracle/8u441-perf
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*
|
vers:oracle/8u441-perf | |
|
vers:unknown/11.0.26
Oracle Corporation / Oracle Java SE
|
vers:unknown/11.0.26 | ||
|
vers:unknown/17.0.14
Oracle Corporation / Oracle Java SE
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle Java SE
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle Java SE
|
vers:unknown/24 | ||
|
vers:unknown/8u441
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441-perf | ||
|
vers:oracle/20.3.17
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*
|
vers:oracle/20.3.17 | |
|
vers:oracle/21.3.13
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*
|
vers:oracle/21.3.13 | |
|
vers:unknown/20.3.17
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/20.3.17 | ||
|
vers:unknown/21.3.13
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/21.3.13 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle GraalVM for JDK
|
cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:unknown/17.0.14
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle GraalVM for JDK
|
vers:unknown/24 | ||
|
vers:unknown/11.0.26
Oracle / Java Se
|
cpe:/a:oracle:java_se:11.0.26
|
vers:unknown/11.0.26 | |
|
vers:unknown/17.0.14
Oracle / Java Se
|
cpe:/a:oracle:java_se:17.0.14
|
vers:unknown/17.0.14 | |
|
vers:unknown/21.0.6
Oracle / Java Se
|
cpe:/a:oracle:java_se:21.0.6
|
vers:unknown/21.0.6 | |
|
vers:unknown/24
Oracle / Java Se
|
cpe:/a:oracle:java_se:24
|
vers:unknown/24 | |
|
vers:unknown/8u441
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441
|
vers:unknown/8u441 | |
|
vers:unknown/8u441
Oracle / Oracle / Java Se
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle / Java Se
|
cpe:/a:oracle:java_se:8u441-perf
|
vers:unknown/8u441-perf | |
|
vers:oracle/11.0.26
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*
|
vers:oracle/11.0.26 | |
|
vers:oracle/17.0.14
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*
|
vers:oracle/17.0.14 | |
|
vers:oracle/21.0.6
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*
|
vers:oracle/21.0.6 | |
|
vers:oracle/24
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*
|
vers:oracle/24 | |
|
vers:oracle/8u441
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*
|
vers:oracle/8u441 | |
|
vers:oracle/8u441-perf
Oracle / Oracle Java SE / Oracle Java SE
|
cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*
|
vers:oracle/8u441-perf | |
|
vers:unknown/11.0.26
Oracle Corporation / Oracle Java SE
|
vers:unknown/11.0.26 | ||
|
vers:unknown/17.0.14
Oracle Corporation / Oracle Java SE
|
vers:unknown/17.0.14 | ||
|
vers:unknown/21.0.6
Oracle Corporation / Oracle Java SE
|
vers:unknown/21.0.6 | ||
|
vers:unknown/24
Oracle Corporation / Oracle Java SE
|
vers:unknown/24 | ||
|
vers:unknown/8u441
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441 | ||
|
vers:unknown/8u441-perf
Oracle Corporation / Oracle Java SE
|
vers:unknown/8u441-perf | ||
|
vers:oracle/20.3.17
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*
|
vers:oracle/20.3.17 | |
|
vers:oracle/21.3.13
Oracle / Oracle Java SE / Oracle GraalVM Enterprise Edition
|
cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*
|
vers:oracle/21.3.13 | |
|
vers:unknown/20.3.17
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/20.3.17 | ||
|
vers:unknown/21.3.13
Oracle Corporation / Oracle GraalVM Enterprise Edition
|
vers:unknown/21.3.13 |
| URL | Category |
|---|---|
| https://www.oracle.com/security-alerts/cpuapr2025.html | external |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2024… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Oracle heeft kwetsbaarheden verholpen in Oracle Java SE en GraalVM (Specifiek voor versies 17.0.14, 21.0.6, 21.0.6 en 24).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden in Oracle Java SE en GraalVM stellen ongeauthenticeerde kwaadwillenden met netwerktoegang in staat om kritieke gegevens te manipuleren of te benaderen. Dit kan leiden tot ongeautoriseerde toegang tot gegevens, vooral via API\u0027s en in omgevingen die onbetrouwbare code uitvoeren. De kwetsbaarheid in de GStreamer-bibliotheek kan ook leiden tot geheugenproblemen en mogelijk willekeurige code-executie door beschadigde pointers.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd; oracle",
"url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
}
],
"title": "Kwetsbaarheden verholpen in Oracle Java",
"tracking": {
"current_release_date": "2025-04-16T15:04:40.041941Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0130",
"initial_release_date": "2025-04-16T15:04:40.041941Z",
"revision_history": [
{
"date": "2025-04-16T15:04:40.041941Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/17.0.14",
"product": {
"name": "vers:oracle/17.0.14",
"product_id": "CSAFPID-2699120",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/21.0.6",
"product": {
"name": "vers:oracle/21.0.6",
"product_id": "CSAFPID-2699118",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/24",
"product": {
"name": "vers:oracle/24",
"product_id": "CSAFPID-2699115",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle GraalVM for JDK"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/11.0.26",
"product": {
"name": "vers:oracle/11.0.26",
"product_id": "CSAFPID-2699119",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/17.0.14",
"product": {
"name": "vers:oracle/17.0.14",
"product_id": "CSAFPID-2699114",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/21.0.6",
"product": {
"name": "vers:oracle/21.0.6",
"product_id": "CSAFPID-2699116",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/24",
"product": {
"name": "vers:oracle/24",
"product_id": "CSAFPID-2699117",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/8u441",
"product": {
"name": "vers:oracle/8u441",
"product_id": "CSAFPID-2698987",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/8u441-perf",
"product": {
"name": "vers:oracle/8u441-perf",
"product_id": "CSAFPID-2699040",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle Java SE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oracle/20.3.17",
"product": {
"name": "vers:oracle/20.3.17",
"product_id": "CSAFPID-2698988",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:oracle/21.3.13",
"product": {
"name": "vers:oracle/21.3.13",
"product_id": "CSAFPID-2698986",
"product_identification_helper": {
"cpe": "cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*"
}
}
}
],
"category": "product_name",
"name": "Oracle GraalVM Enterprise Edition"
}
],
"category": "product_family",
"name": "Oracle Java SE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/11.0.26",
"product": {
"name": "vers:unknown/11.0.26",
"product_id": "CSAFPID-2726951",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:11.0.26"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.0.14",
"product": {
"name": "vers:unknown/17.0.14",
"product_id": "CSAFPID-2726953",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:17.0.14"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/21.0.6",
"product": {
"name": "vers:unknown/21.0.6",
"product_id": "CSAFPID-2726950",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:21.0.6"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/24",
"product": {
"name": "vers:unknown/24",
"product_id": "CSAFPID-2726955",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:24"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8u441",
"product": {
"name": "vers:unknown/8u441",
"product_id": "CSAFPID-2726960",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u441"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8u441-perf",
"product": {
"name": "vers:unknown/8u441-perf",
"product_id": "CSAFPID-2726952",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u441-perf"
}
}
}
],
"category": "product_name",
"name": "Java Se"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/8u441",
"product": {
"name": "vers:unknown/8u441",
"product_id": "CSAFPID-2698325"
}
}
],
"category": "product_name",
"name": "Java Se"
}
],
"category": "product_family",
"name": "Oracle"
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/17.0.14",
"product": {
"name": "vers:unknown/17.0.14",
"product_id": "CSAFPID-2698478"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/21.0.6",
"product": {
"name": "vers:unknown/21.0.6",
"product_id": "CSAFPID-2698479"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/24",
"product": {
"name": "vers:unknown/24",
"product_id": "CSAFPID-2698480"
}
}
],
"category": "product_name",
"name": "Oracle GraalVM for JDK"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/11.0.26",
"product": {
"name": "vers:unknown/11.0.26",
"product_id": "CSAFPID-2698474"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/17.0.14",
"product": {
"name": "vers:unknown/17.0.14",
"product_id": "CSAFPID-2698475"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/21.0.6",
"product": {
"name": "vers:unknown/21.0.6",
"product_id": "CSAFPID-2698476"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/24",
"product": {
"name": "vers:unknown/24",
"product_id": "CSAFPID-2698477"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8u441",
"product": {
"name": "vers:unknown/8u441",
"product_id": "CSAFPID-2698472"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/8u441-perf",
"product": {
"name": "vers:unknown/8u441-perf",
"product_id": "CSAFPID-2698473"
}
}
],
"category": "product_name",
"name": "Oracle Java SE"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/20.3.17",
"product": {
"name": "vers:unknown/20.3.17",
"product_id": "CSAFPID-2698481"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/21.3.13",
"product": {
"name": "vers:unknown/21.3.13",
"product_id": "CSAFPID-2698482"
}
}
],
"category": "product_name",
"name": "Oracle GraalVM Enterprise Edition"
}
],
"category": "vendor",
"name": "Oracle Corporation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-47606",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47606",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47606.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2024-47606"
},
{
"cve": "CVE-2024-54534",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54534",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54534.json"
}
],
"title": "CVE-2024-54534"
},
{
"cve": "CVE-2025-21587",
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-21587",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21587.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2025-21587"
},
{
"cve": "CVE-2025-23083",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-23083",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23083.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2025-23083"
},
{
"cve": "CVE-2025-30691",
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30691",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30691.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2025-30691"
},
{
"cve": "CVE-2025-30698",
"product_status": {
"known_affected": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30698",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30698.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-2699120",
"CSAFPID-2699118",
"CSAFPID-2699115",
"CSAFPID-2698478",
"CSAFPID-2698479",
"CSAFPID-2698480",
"CSAFPID-2726951",
"CSAFPID-2726953",
"CSAFPID-2726950",
"CSAFPID-2726955",
"CSAFPID-2726960",
"CSAFPID-2698325",
"CSAFPID-2726952",
"CSAFPID-2699119",
"CSAFPID-2699114",
"CSAFPID-2699116",
"CSAFPID-2699117",
"CSAFPID-2698987",
"CSAFPID-2699040",
"CSAFPID-2698474",
"CSAFPID-2698475",
"CSAFPID-2698476",
"CSAFPID-2698477",
"CSAFPID-2698472",
"CSAFPID-2698473",
"CSAFPID-2698988",
"CSAFPID-2698986",
"CSAFPID-2698481",
"CSAFPID-2698482"
]
}
],
"title": "CVE-2025-30698"
}
]
}
RHSA-2024:8180
Vulnerability from csaf_redhat - Published: 2024-10-16 13:09 - Updated: 2026-04-13 08:44A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
There's a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
A vulnerability was found in WebKit, where a remote attacker is able to exfiltrate audio data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic issue by convincing a victim to visit a specially crafted website. This results in the attacker evading the Content Security Policy enforcement.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions through an injection issue by persuading a victim to access a specially crafted website, enabling the attackers to fingerprint the user.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic flaw by persuading a victim to access a specially crafted website, enabling attackers to circumvent the Content Security Policy enforcement.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKit. This vulnerability allows a maliciously crafted webpage to fingerprint the user.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKitGTK. A use-after-free may lead to Remote Code Execution. Users are advised to avoid processing untrusted web content in WebKitGTK.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKit. This flaw allows a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. The attacker could perform address bar spoofing by tricking a victim into visiting a specially crafted website.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to the program crashing. Code execution is not discarded as a consequence.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to exfiltrate data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to improper checks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2024:8180 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2270289 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2270290 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2270291 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2270292 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2279689 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2301841 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302067 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302069 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302070 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302071 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2312724 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314698 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314702 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314704 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314706 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2323263 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2333846 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2344618 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2023-43010 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2448778 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-43010 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-43010 | external |
| https://webkitgtk.org/security/WSA-2026-0001.html | external |
| https://access.redhat.com/security/cve/CVE-2024-4558 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2279689 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-4558 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-4558 | external |
| https://access.redhat.com/security/cve/CVE-2024-23254 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2270289 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-23254 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-23254 | external |
| https://seclists.org/fulldisclosure/2024/Mar/21 | external |
| https://access.redhat.com/security/cve/CVE-2024-23263 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2270290 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-23263 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-23263 | external |
| https://access.redhat.com/security/cve/CVE-2024-23280 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2270291 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-23280 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-23280 | external |
| https://access.redhat.com/security/cve/CVE-2024-23284 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2270292 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-23284 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-23284 | external |
| https://access.redhat.com/security/cve/CVE-2024-27820 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314698 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27820 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27820 | external |
| https://webkitgtk.org/security/WSA-2024-0005.html | external |
| https://access.redhat.com/security/cve/CVE-2024-27838 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314702 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27838 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27838 | external |
| https://access.redhat.com/security/cve/CVE-2024-27851 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314704 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27851 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27851 | external |
| https://access.redhat.com/security/cve/CVE-2024-27856 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2344618 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27856 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27856 | external |
| https://support.apple.com/en-us/120896 | external |
| https://support.apple.com/en-us/120898 | external |
| https://support.apple.com/en-us/120901 | external |
| https://support.apple.com/en-us/120902 | external |
| https://support.apple.com/en-us/120903 | external |
| https://support.apple.com/en-us/120905 | external |
| https://support.apple.com/en-us/120906 | external |
| https://webkitgtk.org/security/WSA-2025-0001.html | external |
| https://access.redhat.com/security/cve/CVE-2024-40776 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2301841 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40776 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40776 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html | external |
| https://access.redhat.com/security/cve/CVE-2024-40779 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302070 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40779 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40779 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40780 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302069 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40780 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40780 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40782 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302071 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40782 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40782 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40789 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302067 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40789 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40789 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40866 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2312724 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40866 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40866 | external |
| https://support.apple.com/en-us/121238 | external |
| https://support.apple.com/en-us/121241 | external |
| https://access.redhat.com/security/cve/CVE-2024-44185 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2323263 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-44185 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-44185 | external |
| https://webkitgtk.org/security/WSA-2024-0006.html | external |
| https://access.redhat.com/security/cve/CVE-2024-44187 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314706 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-44187 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-44187 | external |
| https://access.redhat.com/security/cve/CVE-2024-54534 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2333846 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-54534 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-54534 | external |
| https://support.apple.com/en-us/121837 | external |
| https://support.apple.com/en-us/121839 | external |
| https://support.apple.com/en-us/121843 | external |
| https://support.apple.com/en-us/121844 | external |
| https://support.apple.com/en-us/121845 | external |
| https://support.apple.com/en-us/121846 | external |
| https://access.redhat.com/security/cve/CVE-2025-43480 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2416338 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-43480 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-43480 | external |
| https://webkitgtk.org/security/WSA-2025-0008.html | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: malicious website may exfiltrate audio data cross-origin (CVE-2024-23254)\n\n* webkit: processing malicious web content prevents Content Security Policy from being enforced (CVE-2024-23263)\n\n* webkit: maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23280)\n\n* webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced (CVE-2024-23284)\n\n* chromium-browser: Use after free in ANGLE (CVE-2024-4558)\n\n* webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776)\n\n* webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)\n\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)\n\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)\n\n* webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)\n\n* webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)\n\n* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)\n\n* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)\n\n* webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185)\n\n* webkit: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54534)\n\n* webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution (CVE-2024-27856)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:8180",
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2270289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270289"
},
{
"category": "external",
"summary": "2270290",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270290"
},
{
"category": "external",
"summary": "2270291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270291"
},
{
"category": "external",
"summary": "2270292",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270292"
},
{
"category": "external",
"summary": "2279689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279689"
},
{
"category": "external",
"summary": "2301841",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301841"
},
{
"category": "external",
"summary": "2302067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302067"
},
{
"category": "external",
"summary": "2302069",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302069"
},
{
"category": "external",
"summary": "2302070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302070"
},
{
"category": "external",
"summary": "2302071",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302071"
},
{
"category": "external",
"summary": "2312724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312724"
},
{
"category": "external",
"summary": "2314698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314698"
},
{
"category": "external",
"summary": "2314702",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314702"
},
{
"category": "external",
"summary": "2314704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314704"
},
{
"category": "external",
"summary": "2314706",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314706"
},
{
"category": "external",
"summary": "2323263",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2323263"
},
{
"category": "external",
"summary": "2333846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333846"
},
{
"category": "external",
"summary": "2344618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344618"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8180.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-13T08:44:38+00:00",
"generator": {
"date": "2026-04-13T08:44:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2024:8180",
"initial_release_date": "2024-10-16T13:09:14+00:00",
"revision_history": [
{
"date": "2024-10-16T13:09:14+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-03-20T19:16:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-13T08:44:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-2.el9_4.src",
"product": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.src",
"product_id": "webkit2gtk3-0:2.46.1-2.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src"
},
"product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-43010",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T19:58:01.296000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448778"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43010"
},
{
"category": "external",
"summary": "RHBZ#2448778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448778"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43010",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43010"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2024-4558",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2024-05-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2279689"
}
],
"notes": [
{
"category": "description",
"text": "There\u0027s a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in ANGLE",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-4558"
},
{
"category": "external",
"summary": "RHBZ#2279689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-4558",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4558"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-4558",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4558"
}
],
"release_date": "2024-05-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in ANGLE"
},
{
"cve": "CVE-2024-23254",
"discovery_date": "2024-03-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270289"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit, where a remote attacker is able to exfiltrate audio data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: malicious website may exfiltrate audio data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-23254"
},
{
"category": "external",
"summary": "RHBZ#2270289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270289"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-23254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23254"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23254",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23254"
},
{
"category": "external",
"summary": "https://seclists.org/fulldisclosure/2024/Mar/21",
"url": "https://seclists.org/fulldisclosure/2024/Mar/21"
}
],
"release_date": "2024-03-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkit: malicious website may exfiltrate audio data cross-origin"
},
{
"cve": "CVE-2024-23263",
"discovery_date": "2024-03-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270290"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic issue by convincing a victim to visit a specially crafted website. This results in the attacker evading the Content Security Policy enforcement.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: processing malicious web content prevents Content Security Policy from being enforced",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-23263"
},
{
"category": "external",
"summary": "RHBZ#2270290",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270290"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-23263",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23263"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23263",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23263"
},
{
"category": "external",
"summary": "https://seclists.org/fulldisclosure/2024/Mar/21",
"url": "https://seclists.org/fulldisclosure/2024/Mar/21"
}
],
"release_date": "2024-03-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkit: processing malicious web content prevents Content Security Policy from being enforced"
},
{
"cve": "CVE-2024-23280",
"discovery_date": "2024-03-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions through an injection issue by persuading a victim to access a specially crafted website, enabling the attackers to fingerprint the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: maliciously crafted webpage may be able to fingerprint the user",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-23280"
},
{
"category": "external",
"summary": "RHBZ#2270291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-23280",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23280"
},
{
"category": "external",
"summary": "https://seclists.org/fulldisclosure/2024/Mar/21",
"url": "https://seclists.org/fulldisclosure/2024/Mar/21"
}
],
"release_date": "2024-03-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkit: maliciously crafted webpage may be able to fingerprint the user"
},
{
"cve": "CVE-2024-23284",
"discovery_date": "2024-03-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2270292"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic flaw by persuading a victim to access a specially crafted website, enabling attackers to circumvent the Content Security Policy enforcement.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-23284"
},
{
"category": "external",
"summary": "RHBZ#2270292",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270292"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-23284",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23284"
},
{
"category": "external",
"summary": "https://seclists.org/fulldisclosure/2024/Mar/21",
"url": "https://seclists.org/fulldisclosure/2024/Mar/21"
}
],
"release_date": "2024-03-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced"
},
{
"cve": "CVE-2024-27820",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-09-25T15:37:48.081000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314698"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27820"
},
{
"category": "external",
"summary": "RHBZ#2314698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27820"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27838",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-09-25T15:42:35.706000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314702"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKit. This vulnerability allows a maliciously crafted webpage to fingerprint the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A maliciously crafted webpage may be able to fingerprint the user",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27838"
},
{
"category": "external",
"summary": "RHBZ#2314702",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314702"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27838",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27838"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27838",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27838"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A maliciously crafted webpage may be able to fingerprint the user"
},
{
"cve": "CVE-2024-27851",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-09-25T15:44:41.235000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314704"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27851"
},
{
"category": "external",
"summary": "RHBZ#2314704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314704"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27851",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27851"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27856",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2025-02-10T09:34:34.705418+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2344618"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27856"
},
{
"category": "external",
"summary": "RHBZ#2344618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27856",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27856"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120896",
"url": "https://support.apple.com/en-us/120896"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120898",
"url": "https://support.apple.com/en-us/120898"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120901",
"url": "https://support.apple.com/en-us/120901"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120902",
"url": "https://support.apple.com/en-us/120902"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120903",
"url": "https://support.apple.com/en-us/120903"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120905",
"url": "https://support.apple.com/en-us/120905"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120906",
"url": "https://support.apple.com/en-us/120906"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0001.html",
"url": "https://webkitgtk.org/security/WSA-2025-0001.html"
}
],
"release_date": "2025-01-15T19:35:57.075000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution"
},
{
"cve": "CVE-2024-40776",
"discovery_date": "2024-07-30T20:48:03+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2301841"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK. A use-after-free may lead to Remote Code Execution. Users are advised to avoid processing untrusted web content in WebKitGTK.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40776"
},
{
"category": "external",
"summary": "RHBZ#2301841",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301841"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40776",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40776"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40776",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40776"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html"
}
],
"release_date": "2024-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution"
},
{
"cve": "CVE-2024-40779",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:05:50+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40779"
},
{
"category": "external",
"summary": "RHBZ#2302070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40779",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40779"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking"
},
{
"cve": "CVE-2024-40780",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:07:22+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302069"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40780"
},
{
"category": "external",
"summary": "RHBZ#2302069",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302069"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40780",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40780"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40780",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40780"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking"
},
{
"cve": "CVE-2024-40782",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2024-07-31T14:57:24+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302071"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40782"
},
{
"category": "external",
"summary": "RHBZ#2302071",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302071"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40782",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40782"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40782",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40782"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management"
},
{
"cve": "CVE-2024-40789",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:39:05+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302067"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40789"
},
{
"category": "external",
"summary": "RHBZ#2302067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40789",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40789"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2024-40866",
"discovery_date": "2024-09-17T00:31:06.549134+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2312724"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKit. This flaw allows a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. The attacker could perform address bar spoofing by tricking a victim into visiting a specially crafted website.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Visiting a malicious website may lead to address bar spoofing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40866"
},
{
"category": "external",
"summary": "RHBZ#2312724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312724"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40866",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40866"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40866",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40866"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121238",
"url": "https://support.apple.com/en-us/121238"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121241",
"url": "https://support.apple.com/en-us/121241"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-17T00:15:49.840000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: Visiting a malicious website may lead to address bar spoofing"
},
{
"cve": "CVE-2024-44185",
"cwe": {
"id": "CWE-788",
"name": "Access of Memory Location After End of Buffer"
},
"discovery_date": "2024-11-01T20:05:39.339000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2323263"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to the program crashing. Code execution is not discarded as a consequence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as important severity because it allows maliciously crafted web content to crash the application, potentially leads to denial of service. While it does not compromise confidentiality or integrity, the ability to crash the program without requiring authentication poses a significant risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-44185"
},
{
"category": "external",
"summary": "RHBZ#2323263",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2323263"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-44185",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-44185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44185"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0006.html",
"url": "https://webkitgtk.org/security/WSA-2024-0006.html"
}
],
"release_date": "2024-10-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2024-44187",
"discovery_date": "2024-09-25T15:50:57.927000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314706"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to exfiltrate data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A malicious website may exfiltrate data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-44187"
},
{
"category": "external",
"summary": "RHBZ#2314706",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314706"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-44187",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-44187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44187"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A malicious website may exfiltrate data cross-origin"
},
{
"cve": "CVE-2024-54534",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2024-12-23T13:18:32.596325+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-54534"
},
{
"category": "external",
"summary": "RHBZ#2333846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-54534",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54534"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121837",
"url": "https://support.apple.com/en-us/121837"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121839",
"url": "https://support.apple.com/en-us/121839"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121843",
"url": "https://support.apple.com/en-us/121843"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121844",
"url": "https://support.apple.com/en-us/121844"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121845",
"url": "https://support.apple.com/en-us/121845"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121846",
"url": "https://support.apple.com/en-us/121846"
}
],
"release_date": "2024-12-11T22:58:39.974000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43480",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:52:14.645000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to improper checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A malicious website may exfiltrate data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43480"
},
{
"category": "external",
"summary": "RHBZ#2416338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43480",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43480"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43480",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43480"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-16T13:09:14+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8180"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
"AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A malicious website may exfiltrate data cross-origin"
}
]
}
RHSA-2024:8492
Vulnerability from csaf_redhat - Published: 2024-10-28 00:58 - Updated: 2026-04-13 08:44A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKitGTK and WPE WebKit, which allows remote attacker to perform arbitrary code execution when processing web content. This vulnerability caused by insufficient checks, which could be exploited by attackers to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in memory corruption.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
There's a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKitGTK. A use-after-free may lead to Remote Code Execution. Users are advised to avoid processing untrusted web content in WebKitGTK.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to improper checks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2024:8492 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2236842 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2238945 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2253058 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2271456 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2279689 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2301841 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302067 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302069 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302070 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302071 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314698 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314704 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2022-32885 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2236842 | external |
| https://www.cve.org/CVERecord?id=CVE-2022-32885 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2022-32885 | external |
| https://webkitgtk.org/security/WSA-2023-0003.html | external |
| https://access.redhat.com/security/cve/CVE-2023-40397 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2238945 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-40397 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-40397 | external |
| https://wpewebkit.org/security/WSA-2023-0008.html | external |
| https://access.redhat.com/security/cve/CVE-2023-42852 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2271456 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-42852 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-42852 | external |
| https://webkitgtk.org/security/WSA-2023-0010.html | external |
| https://access.redhat.com/security/cve/CVE-2023-42875 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2366497 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-42875 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-42875 | external |
| https://webkitgtk.org/security/WSA-2025-0004.html | external |
| https://access.redhat.com/security/cve/CVE-2023-42917 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2253058 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-42917 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-42917 | external |
| https://webkitgtk.org/security/WSA-2023-0011.html | external |
| https://www.cisa.gov/known-exploited-vulnerabilit… | external |
| https://access.redhat.com/security/cve/CVE-2023-42970 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2366498 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-42970 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-42970 | external |
| https://access.redhat.com/security/cve/CVE-2023-43000 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2416324 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-43000 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-43000 | external |
| https://webkitgtk.org/security/WSA-2025-0008.html | external |
| https://access.redhat.com/security/cve/CVE-2023-43010 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2448778 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-43010 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-43010 | external |
| https://webkitgtk.org/security/WSA-2026-0001.html | external |
| https://access.redhat.com/security/cve/CVE-2024-4558 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2279689 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-4558 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-4558 | external |
| https://access.redhat.com/security/cve/CVE-2024-27820 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314698 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27820 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27820 | external |
| https://webkitgtk.org/security/WSA-2024-0005.html | external |
| https://access.redhat.com/security/cve/CVE-2024-27851 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314704 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27851 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27851 | external |
| https://access.redhat.com/security/cve/CVE-2024-27856 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2344618 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27856 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27856 | external |
| https://support.apple.com/en-us/120896 | external |
| https://support.apple.com/en-us/120898 | external |
| https://support.apple.com/en-us/120901 | external |
| https://support.apple.com/en-us/120902 | external |
| https://support.apple.com/en-us/120903 | external |
| https://support.apple.com/en-us/120905 | external |
| https://support.apple.com/en-us/120906 | external |
| https://webkitgtk.org/security/WSA-2025-0001.html | external |
| https://access.redhat.com/security/cve/CVE-2024-40776 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2301841 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40776 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40776 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html | external |
| https://access.redhat.com/security/cve/CVE-2024-40779 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302070 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40779 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40779 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40780 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302069 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40780 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40780 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40782 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302071 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40782 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40782 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40789 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302067 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40789 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40789 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-54534 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2333846 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-54534 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-54534 | external |
| https://support.apple.com/en-us/121837 | external |
| https://support.apple.com/en-us/121839 | external |
| https://support.apple.com/en-us/121843 | external |
| https://support.apple.com/en-us/121844 | external |
| https://support.apple.com/en-us/121845 | external |
| https://support.apple.com/en-us/121846 | external |
| https://access.redhat.com/security/cve/CVE-2025-43480 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2416338 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-43480 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-43480 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)\n\n* webkitgtk: arbitrary javascript code execution (CVE-2023-40397)\n\n* webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)\n\n* chromium-browser: Use after free in ANGLE (CVE-2024-4558)\n\n* webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776)\n\n* webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)\n\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)\n\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)\n\n* webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:8492",
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2236842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236842"
},
{
"category": "external",
"summary": "2238945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238945"
},
{
"category": "external",
"summary": "2253058",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253058"
},
{
"category": "external",
"summary": "2271456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271456"
},
{
"category": "external",
"summary": "2279689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279689"
},
{
"category": "external",
"summary": "2301841",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301841"
},
{
"category": "external",
"summary": "2302067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302067"
},
{
"category": "external",
"summary": "2302069",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302069"
},
{
"category": "external",
"summary": "2302070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302070"
},
{
"category": "external",
"summary": "2302071",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302071"
},
{
"category": "external",
"summary": "2314698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314698"
},
{
"category": "external",
"summary": "2314704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314704"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8492.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-13T08:44:39+00:00",
"generator": {
"date": "2026-04-13T08:44:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2024:8492",
"initial_release_date": "2024-10-28T00:58:43+00:00",
"revision_history": [
{
"date": "2024-10-28T00:58:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-10-28T00:58:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-13T08:44:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_2.src",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.src",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_2.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-32885",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2023-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2236842"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Memory corruption issue when processing web content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is being rated as \u0027Moderate\u0027 as WebKitGTK package is shipped as a dependency for Gnome package, additionally Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-32885"
},
{
"category": "external",
"summary": "RHBZ#2236842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236842"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-32885",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32885"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32885",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32885"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0003.html",
"url": "https://webkitgtk.org/security/WSA-2023-0003.html"
}
],
"release_date": "2023-04-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: Memory corruption issue when processing web content"
},
{
"cve": "CVE-2023-40397",
"cwe": {
"id": "CWE-96",
"name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
},
"discovery_date": "2023-09-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2238945"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: arbitrary javascript code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is being rated as \u0027Moderate\u0027 as WebKitGTK package is shipped as a dependency for Gnome package. Additionally, Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-40397"
},
{
"category": "external",
"summary": "RHBZ#2238945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-40397",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40397"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-40397",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40397"
},
{
"category": "external",
"summary": "https://wpewebkit.org/security/WSA-2023-0008.html",
"url": "https://wpewebkit.org/security/WSA-2023-0008.html"
}
],
"release_date": "2023-09-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: arbitrary javascript code execution"
},
{
"cve": "CVE-2023-42852",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2271456"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK and WPE WebKit, which allows remote attacker to perform arbitrary code execution when processing web content. This vulnerability caused by insufficient checks, which could be exploited by attackers to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated important because it affects the confidentiality, integrity, and availability (CIA) of systems, with a high severity rating.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-42852"
},
{
"category": "external",
"summary": "RHBZ#2271456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-42852",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42852"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
"url": "https://webkitgtk.org/security/WSA-2023-0010.html"
}
],
"release_date": "2023-11-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2023-42875",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-05-15T12:59:19.828000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366497"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-42875"
},
{
"category": "external",
"summary": "RHBZ#2366497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-42875",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42875"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
"url": "https://webkitgtk.org/security/WSA-2025-0004.html"
}
],
"release_date": "2025-05-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2023-42917",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2023-12-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2253058"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA\u0027s KEV catalog.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Arbitrary Remote Code Execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All versions of Red Hat Enterprise Linux are affected to this vulnerability. To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw was rated with an important, and not critical, severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-42917"
},
{
"category": "external",
"summary": "RHBZ#2253058",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253058"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-42917",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42917"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42917",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42917"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0011.html",
"url": "https://webkitgtk.org/security/WSA-2023-0011.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2023-12-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2023-12-04T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Arbitrary Remote Code Execution"
},
{
"cve": "CVE-2023-42970",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-05-15T13:01:32.590000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366498"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-42970"
},
{
"category": "external",
"summary": "RHBZ#2366498",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366498"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-42970",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42970"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42970",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42970"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
"url": "https://webkitgtk.org/security/WSA-2025-0004.html"
}
],
"release_date": "2025-05-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2023-43000",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:36:58.206000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416324"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43000"
},
{
"category": "external",
"summary": "RHBZ#2416324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416324"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43000",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43000"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43000",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43000"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2026-03-05T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2023-43010",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T19:58:01.296000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448778"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43010"
},
{
"category": "external",
"summary": "RHBZ#2448778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448778"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43010",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43010"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2024-4558",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2024-05-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2279689"
}
],
"notes": [
{
"category": "description",
"text": "There\u0027s a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in ANGLE",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-4558"
},
{
"category": "external",
"summary": "RHBZ#2279689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-4558",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4558"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-4558",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4558"
}
],
"release_date": "2024-05-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in ANGLE"
},
{
"cve": "CVE-2024-27820",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-09-25T15:37:48.081000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314698"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27820"
},
{
"category": "external",
"summary": "RHBZ#2314698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27820"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27851",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-09-25T15:44:41.235000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314704"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27851"
},
{
"category": "external",
"summary": "RHBZ#2314704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314704"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27851",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27851"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27856",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2025-02-10T09:34:34.705418+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2344618"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27856"
},
{
"category": "external",
"summary": "RHBZ#2344618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27856",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27856"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120896",
"url": "https://support.apple.com/en-us/120896"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120898",
"url": "https://support.apple.com/en-us/120898"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120901",
"url": "https://support.apple.com/en-us/120901"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120902",
"url": "https://support.apple.com/en-us/120902"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120903",
"url": "https://support.apple.com/en-us/120903"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120905",
"url": "https://support.apple.com/en-us/120905"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120906",
"url": "https://support.apple.com/en-us/120906"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0001.html",
"url": "https://webkitgtk.org/security/WSA-2025-0001.html"
}
],
"release_date": "2025-01-15T19:35:57.075000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution"
},
{
"cve": "CVE-2024-40776",
"discovery_date": "2024-07-30T20:48:03+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2301841"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK. A use-after-free may lead to Remote Code Execution. Users are advised to avoid processing untrusted web content in WebKitGTK.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40776"
},
{
"category": "external",
"summary": "RHBZ#2301841",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301841"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40776",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40776"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40776",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40776"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html"
}
],
"release_date": "2024-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution"
},
{
"cve": "CVE-2024-40779",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:05:50+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40779"
},
{
"category": "external",
"summary": "RHBZ#2302070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40779",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40779"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking"
},
{
"cve": "CVE-2024-40780",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:07:22+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302069"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40780"
},
{
"category": "external",
"summary": "RHBZ#2302069",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302069"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40780",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40780"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40780",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40780"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking"
},
{
"cve": "CVE-2024-40782",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2024-07-31T14:57:24+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302071"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40782"
},
{
"category": "external",
"summary": "RHBZ#2302071",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302071"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40782",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40782"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40782",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40782"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management"
},
{
"cve": "CVE-2024-40789",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:39:05+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302067"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40789"
},
{
"category": "external",
"summary": "RHBZ#2302067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40789",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40789"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2024-54534",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2024-12-23T13:18:32.596325+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-54534"
},
{
"category": "external",
"summary": "RHBZ#2333846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-54534",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54534"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121837",
"url": "https://support.apple.com/en-us/121837"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121839",
"url": "https://support.apple.com/en-us/121839"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121843",
"url": "https://support.apple.com/en-us/121843"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121844",
"url": "https://support.apple.com/en-us/121844"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121845",
"url": "https://support.apple.com/en-us/121845"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121846",
"url": "https://support.apple.com/en-us/121846"
}
],
"release_date": "2024-12-11T22:58:39.974000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-43480",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:52:14.645000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to improper checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A malicious website may exfiltrate data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43480"
},
{
"category": "external",
"summary": "RHBZ#2416338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43480",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43480"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43480",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43480"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T00:58:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8492"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.src",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.i686",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A malicious website may exfiltrate data cross-origin"
}
]
}
RHSA-2024:8496
Vulnerability from csaf_redhat - Published: 2024-10-28 01:13 - Updated: 2026-04-13 08:44A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKitGTK and WPE WebKit, which allows remote attacker to perform arbitrary code execution when processing web content. This vulnerability caused by insufficient checks, which could be exploited by attackers to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in memory corruption.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
There's a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
|
A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution due to a type confusion issue. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient input validation, which attackers could exploit to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A vulnerability was found in WebKitGTK. A use-after-free may lead to Remote Code Execution. Users are advised to avoid processing untrusted web content in WebKitGTK.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause out-of-bounds memory access due to improper memory handling and result in memory corruption.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a type confusion issue due to improper state handling and result in an unexpected crash.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. Processing malicious web content can cause a NULL pointer dereference due to improper checks, resulting in an unexpected process crash.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to improper checks.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2024:8496 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://access.redhat.com/security/vulnerabilities/ | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2236842 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2238945 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2253058 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2259893 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2271456 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2279689 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2301841 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302067 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302069 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302070 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302071 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314697 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314698 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314700 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314704 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2022-32885 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2236842 | external |
| https://www.cve.org/CVERecord?id=CVE-2022-32885 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2022-32885 | external |
| https://webkitgtk.org/security/WSA-2023-0003.html | external |
| https://access.redhat.com/security/cve/CVE-2023-40397 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2238945 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-40397 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-40397 | external |
| https://wpewebkit.org/security/WSA-2023-0008.html | external |
| https://access.redhat.com/security/cve/CVE-2023-42852 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2271456 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-42852 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-42852 | external |
| https://webkitgtk.org/security/WSA-2023-0010.html | external |
| https://access.redhat.com/security/cve/CVE-2023-42875 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2366497 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-42875 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-42875 | external |
| https://webkitgtk.org/security/WSA-2025-0004.html | external |
| https://access.redhat.com/security/cve/CVE-2023-42917 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2253058 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-42917 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-42917 | external |
| https://webkitgtk.org/security/WSA-2023-0011.html | external |
| https://www.cisa.gov/known-exploited-vulnerabilit… | external |
| https://access.redhat.com/security/cve/CVE-2023-42970 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2366498 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-42970 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-42970 | external |
| https://access.redhat.com/security/cve/CVE-2023-43000 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2416324 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-43000 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-43000 | external |
| https://webkitgtk.org/security/WSA-2025-0008.html | external |
| https://access.redhat.com/security/cve/CVE-2023-43010 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2448778 | external |
| https://www.cve.org/CVERecord?id=CVE-2023-43010 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2023-43010 | external |
| https://webkitgtk.org/security/WSA-2026-0001.html | external |
| https://access.redhat.com/security/cve/CVE-2024-4558 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2279689 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-4558 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-4558 | external |
| https://access.redhat.com/security/cve/CVE-2024-23222 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2259893 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-23222 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-23222 | external |
| https://webkitgtk.org/security/WSA-2024-0001.html | external |
| https://access.redhat.com/security/cve/CVE-2024-27808 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314697 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27808 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27808 | external |
| https://webkitgtk.org/security/WSA-2024-0005.html | external |
| https://access.redhat.com/security/cve/CVE-2024-27820 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314698 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27820 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27820 | external |
| https://access.redhat.com/security/cve/CVE-2024-27833 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314700 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27833 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27833 | external |
| https://access.redhat.com/security/cve/CVE-2024-27851 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2314704 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27851 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27851 | external |
| https://access.redhat.com/security/cve/CVE-2024-27856 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2344618 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-27856 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-27856 | external |
| https://support.apple.com/en-us/120896 | external |
| https://support.apple.com/en-us/120898 | external |
| https://support.apple.com/en-us/120901 | external |
| https://support.apple.com/en-us/120902 | external |
| https://support.apple.com/en-us/120903 | external |
| https://support.apple.com/en-us/120905 | external |
| https://support.apple.com/en-us/120906 | external |
| https://webkitgtk.org/security/WSA-2025-0001.html | external |
| https://access.redhat.com/security/cve/CVE-2024-40776 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2301841 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40776 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40776 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html | external |
| https://access.redhat.com/security/cve/CVE-2024-40779 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302070 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40779 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40779 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40780 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302069 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40780 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40780 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40782 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302071 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40782 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40782 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-40789 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2302067 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-40789 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-40789 | external |
| https://webkitgtk.org/security/WSA-2024-0004.html… | external |
| https://access.redhat.com/security/cve/CVE-2024-54534 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2333846 | external |
| https://www.cve.org/CVERecord?id=CVE-2024-54534 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2024-54534 | external |
| https://support.apple.com/en-us/121837 | external |
| https://support.apple.com/en-us/121839 | external |
| https://support.apple.com/en-us/121843 | external |
| https://support.apple.com/en-us/121844 | external |
| https://support.apple.com/en-us/121845 | external |
| https://support.apple.com/en-us/121846 | external |
| https://access.redhat.com/security/cve/CVE-2025-24223 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2366499 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-24223 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-24223 | external |
| https://access.redhat.com/security/cve/CVE-2025-24264 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2357918 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-24264 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-24264 | external |
| https://webkitgtk.org/security/WSA-2025-0003.html | external |
| https://access.redhat.com/security/cve/CVE-2025-31204 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2366500 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-31204 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-31204 | external |
| https://access.redhat.com/security/cve/CVE-2025-31206 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2366502 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-31206 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-31206 | external |
| https://access.redhat.com/security/cve/CVE-2025-31215 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2366503 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-31215 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-31215 | external |
| https://access.redhat.com/security/cve/CVE-2025-43480 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2416338 | external |
| https://www.cve.org/CVERecord?id=CVE-2025-43480 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2025-43480 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)\n\n* webkitgtk: arbitrary javascript code execution (CVE-2023-40397)\n\n* webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)\n\n* webkitgtk: type confusion may lead to arbitrary code execution (CVE-2024-23222)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)\n\n* chromium-browser: Use after free in ANGLE (CVE-2024-4558)\n\n* webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776)\n\n* webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)\n\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)\n\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)\n\n* webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27808)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27833)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:8496",
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/vulnerabilities/",
"url": "https://access.redhat.com/security/vulnerabilities/"
},
{
"category": "external",
"summary": "2236842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236842"
},
{
"category": "external",
"summary": "2238945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238945"
},
{
"category": "external",
"summary": "2253058",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253058"
},
{
"category": "external",
"summary": "2259893",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259893"
},
{
"category": "external",
"summary": "2271456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271456"
},
{
"category": "external",
"summary": "2279689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279689"
},
{
"category": "external",
"summary": "2301841",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301841"
},
{
"category": "external",
"summary": "2302067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302067"
},
{
"category": "external",
"summary": "2302069",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302069"
},
{
"category": "external",
"summary": "2302070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302070"
},
{
"category": "external",
"summary": "2302071",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302071"
},
{
"category": "external",
"summary": "2314697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314697"
},
{
"category": "external",
"summary": "2314698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314698"
},
{
"category": "external",
"summary": "2314700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314700"
},
{
"category": "external",
"summary": "2314704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314704"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8496.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security update",
"tracking": {
"current_release_date": "2026-04-13T08:44:39+00:00",
"generator": {
"date": "2026-04-13T08:44:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2024:8496",
"initial_release_date": "2024-10-28T01:13:18+00:00",
"revision_history": [
{
"date": "2024-10-28T01:13:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-10-28T01:13:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-13T08:44:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.0::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_0.src",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.src",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_0?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_0?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-1.el9_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-1.el9_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_0.src",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"product_id": "AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"relates_to_product_reference": "AppStream-9.0.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-32885",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2023-09-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2236842"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Memory corruption issue when processing web content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is being rated as \u0027Moderate\u0027 as WebKitGTK package is shipped as a dependency for Gnome package, additionally Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-32885"
},
{
"category": "external",
"summary": "RHBZ#2236842",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236842"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-32885",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32885"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32885",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32885"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0003.html",
"url": "https://webkitgtk.org/security/WSA-2023-0003.html"
}
],
"release_date": "2023-04-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: Memory corruption issue when processing web content"
},
{
"cve": "CVE-2023-40397",
"cwe": {
"id": "CWE-96",
"name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
},
"discovery_date": "2023-09-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2238945"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: arbitrary javascript code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is being rated as \u0027Moderate\u0027 as WebKitGTK package is shipped as a dependency for Gnome package. Additionally, Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-40397"
},
{
"category": "external",
"summary": "RHBZ#2238945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-40397",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40397"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-40397",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40397"
},
{
"category": "external",
"summary": "https://wpewebkit.org/security/WSA-2023-0008.html",
"url": "https://wpewebkit.org/security/WSA-2023-0008.html"
}
],
"release_date": "2023-09-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: arbitrary javascript code execution"
},
{
"cve": "CVE-2023-42852",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2271456"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK and WPE WebKit, which allows remote attacker to perform arbitrary code execution when processing web content. This vulnerability caused by insufficient checks, which could be exploited by attackers to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated important because it affects the confidentiality, integrity, and availability (CIA) of systems, with a high severity rating.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-42852"
},
{
"category": "external",
"summary": "RHBZ#2271456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-42852",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42852"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
"url": "https://webkitgtk.org/security/WSA-2023-0010.html"
}
],
"release_date": "2023-11-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2023-42875",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-05-15T12:59:19.828000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366497"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-42875"
},
{
"category": "external",
"summary": "RHBZ#2366497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-42875",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42875"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42875",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42875"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
"url": "https://webkitgtk.org/security/WSA-2025-0004.html"
}
],
"release_date": "2025-05-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2023-42917",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2023-12-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2253058"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA\u0027s KEV catalog.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Arbitrary Remote Code Execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All versions of Red Hat Enterprise Linux are affected to this vulnerability. To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw was rated with an important, and not critical, severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-42917"
},
{
"category": "external",
"summary": "RHBZ#2253058",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253058"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-42917",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42917"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42917",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42917"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0011.html",
"url": "https://webkitgtk.org/security/WSA-2023-0011.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2023-12-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2023-12-04T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Arbitrary Remote Code Execution"
},
{
"cve": "CVE-2023-42970",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-05-15T13:01:32.590000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366498"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-42970"
},
{
"category": "external",
"summary": "RHBZ#2366498",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366498"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-42970",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42970"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42970",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42970"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
"url": "https://webkitgtk.org/security/WSA-2025-0004.html"
}
],
"release_date": "2025-05-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2023-43000",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-11-21T12:36:58.206000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416324"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43000"
},
{
"category": "external",
"summary": "RHBZ#2416324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416324"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43000",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43000"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43000",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43000"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2026-03-05T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2023-43010",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T19:58:01.296000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448778"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-43010"
},
{
"category": "external",
"summary": "RHBZ#2448778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448778"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-43010",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43010"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
"url": "https://webkitgtk.org/security/WSA-2026-0001.html"
}
],
"release_date": "2026-03-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2024-4558",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2024-05-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2279689"
}
],
"notes": [
{
"category": "description",
"text": "There\u0027s a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "chromium-browser: Use after free in ANGLE",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-4558"
},
{
"category": "external",
"summary": "RHBZ#2279689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-4558",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4558"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-4558",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4558"
}
],
"release_date": "2024-05-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "chromium-browser: Use after free in ANGLE"
},
{
"cve": "CVE-2024-23222",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2024-01-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2259893"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution due to a type confusion issue. This vulnerability is known to be actively exploited in the wild and was included in the CISA\u0027s KEV catalog.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: type confusion may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw depends on the WebKitGTK JIT engine to be enabled. This feature has been disabled in Red Hat Enterprise Linux 8.8 and 9.2 by the errata RHSA-2023:4202 and RHSA-2023:4201. Therefore, Red Hat Enterprise Linux 8.8 and 9.2, when these errata are applied, and newer versions are not affected by this vulnerability.\n\nRHSA-2023:4202: https://access.redhat.com/errata/RHSA-2023:4202\nRHSA-2023:4201: https://access.redhat.com/errata/RHSA-2023:4201\n\nTo exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw was rated with an important, and not critical, severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-23222"
},
{
"category": "external",
"summary": "RHBZ#2259893",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259893"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-23222",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23222"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23222",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23222"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0001.html",
"url": "https://webkitgtk.org/security/WSA-2024-0001.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2024-01-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2024-01-23T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: type confusion may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27808",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-09-25T15:36:18.356000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314697"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27808"
},
{
"category": "external",
"summary": "RHBZ#2314697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27808",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27808"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27808",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27808"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27820",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-09-25T15:37:48.081000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314698"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27820"
},
{
"category": "external",
"summary": "RHBZ#2314698",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314698"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27820"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27833",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-09-25T15:40:34.042000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314700"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient input validation, which attackers could exploit to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27833"
},
{
"category": "external",
"summary": "RHBZ#2314700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314700"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27833",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27833"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27851",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2024-09-25T15:44:41.235000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2314704"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27851"
},
{
"category": "external",
"summary": "RHBZ#2314704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314704"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27851",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27851"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
"url": "https://webkitgtk.org/security/WSA-2024-0005.html"
}
],
"release_date": "2024-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
},
{
"cve": "CVE-2024-27856",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2025-02-10T09:34:34.705418+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2344618"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-27856"
},
{
"category": "external",
"summary": "RHBZ#2344618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-27856",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27856"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120896",
"url": "https://support.apple.com/en-us/120896"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120898",
"url": "https://support.apple.com/en-us/120898"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120901",
"url": "https://support.apple.com/en-us/120901"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120902",
"url": "https://support.apple.com/en-us/120902"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120903",
"url": "https://support.apple.com/en-us/120903"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120905",
"url": "https://support.apple.com/en-us/120905"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/120906",
"url": "https://support.apple.com/en-us/120906"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0001.html",
"url": "https://webkitgtk.org/security/WSA-2025-0001.html"
}
],
"release_date": "2025-01-15T19:35:57.075000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution"
},
{
"cve": "CVE-2024-40776",
"discovery_date": "2024-07-30T20:48:03+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2301841"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK. A use-after-free may lead to Remote Code Execution. Users are advised to avoid processing untrusted web content in WebKitGTK.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40776"
},
{
"category": "external",
"summary": "RHBZ#2301841",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301841"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40776",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40776"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40776",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40776"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html"
}
],
"release_date": "2024-07-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution"
},
{
"cve": "CVE-2024-40779",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:05:50+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40779"
},
{
"category": "external",
"summary": "RHBZ#2302070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40779",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40779"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking"
},
{
"cve": "CVE-2024-40780",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:07:22+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302069"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40780"
},
{
"category": "external",
"summary": "RHBZ#2302069",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302069"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40780",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40780"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40780",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40780"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking"
},
{
"cve": "CVE-2024-40782",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2024-07-31T14:57:24+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302071"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40782"
},
{
"category": "external",
"summary": "RHBZ#2302071",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302071"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40782",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40782"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40782",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40782"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management"
},
{
"cve": "CVE-2024-40789",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2024-07-31T15:39:05+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302067"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-40789"
},
{
"category": "external",
"summary": "RHBZ#2302067",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302067"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-40789",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40789"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789",
"url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789"
}
],
"release_date": "2024-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2024-54534",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2024-12-23T13:18:32.596325+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkit: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-54534"
},
{
"category": "external",
"summary": "RHBZ#2333846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-54534",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54534"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121837",
"url": "https://support.apple.com/en-us/121837"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121839",
"url": "https://support.apple.com/en-us/121839"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121843",
"url": "https://support.apple.com/en-us/121843"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121844",
"url": "https://support.apple.com/en-us/121844"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121845",
"url": "https://support.apple.com/en-us/121845"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/121846",
"url": "https://support.apple.com/en-us/121846"
}
],
"release_date": "2024-12-11T22:58:39.974000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkit: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-24223",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2025-05-15T13:03:40.562000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366499"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24223"
},
{
"category": "external",
"summary": "RHBZ#2366499",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366499"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24223"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
"url": "https://webkitgtk.org/security/WSA-2025-0004.html"
}
],
"release_date": "2025-05-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-24264",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2025-04-07T14:31:23.097000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2357918"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-24264"
},
{
"category": "external",
"summary": "RHBZ#2357918",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357918"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-24264",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24264"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0003.html",
"url": "https://webkitgtk.org/security/WSA-2025-0003.html"
}
],
"release_date": "2025-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-31204",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2025-05-15T13:04:43.281000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366500"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause out-of-bounds memory access due to improper memory handling and result in memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-31204"
},
{
"category": "external",
"summary": "RHBZ#2366500",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366500"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-31204",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31204"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31204",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31204"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
"url": "https://webkitgtk.org/security/WSA-2025-0004.html"
}
],
"release_date": "2025-05-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
},
{
"cve": "CVE-2025-31206",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2025-05-15T13:06:54.355000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366502"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a type confusion issue due to improper state handling and result in an unexpected crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-31206"
},
{
"category": "external",
"summary": "RHBZ#2366502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-31206",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31206"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31206",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31206"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
"url": "https://webkitgtk.org/security/WSA-2025-0004.html"
}
],
"release_date": "2025-05-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash"
},
{
"cve": "CVE-2025-31215",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2025-05-15T13:07:56.027000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2366503"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a NULL pointer dereference due to improper checks, resulting in an unexpected process crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-31215"
},
{
"category": "external",
"summary": "RHBZ#2366503",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366503"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-31215",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31215"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31215",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31215"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
"url": "https://webkitgtk.org/security/WSA-2025-0004.html"
}
],
"release_date": "2025-05-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash"
},
{
"cve": "CVE-2025-43480",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-11-21T12:52:14.645000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to improper checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: A malicious website may exfiltrate data cross-origin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-43480"
},
{
"category": "external",
"summary": "RHBZ#2416338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-43480",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43480"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43480",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43480"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
"url": "https://webkitgtk.org/security/WSA-2025-0008.html"
}
],
"release_date": "2025-11-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-28T01:13:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:8496"
},
{
"category": "workaround",
"details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
"product_ids": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.src",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-debuginfo-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.1-1.el9_0.x86_64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.aarch64",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.i686",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.ppc64le",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.s390x",
"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-1.el9_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: A malicious website may exfiltrate data cross-origin"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.