webkit2gtk - security update

Fixed packages 2

Vulnerabilities 10

• High 8.8
  CVE-2023-41993 Exploited Public exploit EPSS 24%

  The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi
  Sep 21, 2023

  KEV Sep 25, 2023
• High 8.8
  CVE-2023-43000 Exploited

  A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Nov 5, 2025

  KEV Mar 5, 2026
• Critical 9.8
  CVE-2023-40414

  A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPa…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jan 10, 2024
• High 8.8
  CVE-2023-39928

  A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page…

  WebKit WebKit qtwebkit-source qtwebkit-opensource-src Browsers Debian Ubuntu
  Oct 6, 2023
• High 8.8
  CVE-2023-41074

  The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi
  Sep 26, 2023
• High 8.8
  CVE-2023-42970

  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macO…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 11, 2025
• High 7.3
  CVE-2023-42875

  Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 11, 2025
• High 7.1
  CVE-2014-1745

  Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows …

  chromium-browser webkit2gtk wpewebkit Debian Ubuntu
  May 21, 2014
• Unscored —
  CVE-2023-32359

  This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS…

  Apple iOS and iPadOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu
  Oct 25, 2023
• Unscored —
  CVE-2023-42890

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 1…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Dec 12, 2023