RHSA-2023:4202 — Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3	0:2.38.5-1.el8_8.5
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-debuginfo	0:2.38.5-1.el8_8.5
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-debugsource	0:2.38.5-1.el8_8.5
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-devel	0:2.38.5-1.el8_8.5
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-devel-debuginfo	0:2.38.5-1.el8_8.5
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc	0:2.38.5-1.el8_8.5
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-debuginfo	0:2.38.5-1.el8_8.5
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-devel	0:2.38.5-1.el8_8.5
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.38.5-1.el8_8.5

Vulnerabilities 21

High 8.8

CVE-2023-32435 Exploited EPSS 23%

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safa…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jun 23, 2023
KEV Jun 23, 2023
High 8.8

CVE-2023-32439 Exploited EPSS 24%

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jun 23, 2023
KEV Jun 23, 2023
High 8.8

CVE-2023-37450 Exploited EPSS 19%

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
KEV Jul 13, 2023
High 8.8

CVE-2023-41993 Exploited Public exploit EPSS 24%

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi

Sep 21, 2023
KEV Sep 25, 2023
High 8.8

CVE-2024-23222 Exploited Public exploit EPSS 11%

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15…

Apple macOS iOS and iPadOS tvOS macOS iOS Browsers Debian Ubuntu

Jan 23, 2024
KEV Jan 23, 2024
Medium 6.5

CVE-2023-42916 Exploited EPSS 18%

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Nov 30, 2023
KEV Dec 4, 2023
Medium 5.5

CVE-2024-27834 Exploited

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 13, 2024
KEV Nov 4, 2026
Critical 9.8

CVE-2025-24264

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 31, 2025
High 8.8

CVE-2022-32885

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…

Apple macOS webkit2gtk webkit2gtk macOS Debian Ubuntu

May 8, 2023
High 8.8

CVE-2023-35074

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 26, 2023
High 8.8

CVE-2023-41074

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Sep 26, 2023
High 8.8

CVE-2025-31204

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 12, 2025
High 8.0

CVE-2025-24223

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 12, 2025
High 7.5

CVE-2024-27808

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
High 7.5

CVE-2024-27833

An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iP…

Apple iOS and iPadOS tvOS visionOS iOS Browsers Debian Ubuntu

Jun 10, 2024
Medium 6.5

CVE-2025-31215

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 12, 2025
Medium 4.3

CVE-2025-31206

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPa…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 12, 2025
Unscored —

CVE-2023-28198

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, …

Apple macOS iOS and iPadOS qtwebkit-source macOS iOS Debian Ubuntu

Aug 14, 2023
Unscored —

CVE-2023-38594

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
Unscored —

CVE-2023-38595

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2024-23252 Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

webkit2gtk Ubuntu

Mar 8, 2024

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218626
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218640
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4202.json
report
https://access.redhat.com/security/cve/CVE-2022-32885
report
https://bugzilla.redhat.com/show_bug.cgi?id=2236842
advisory
https://www.cve.org/CVERecord?id=CVE-2022-32885
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-32885
article
https://webkitgtk.org/security/WSA-2023-0003.html
report
https://access.redhat.com/security/cve/CVE-2023-28198
report
https://bugzilla.redhat.com/show_bug.cgi?id=2238943
advisory
https://www.cve.org/CVERecord?id=CVE-2023-28198
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-28198
article
https://webkitgtk.org/security/WSA-2023-0008.html
report
https://access.redhat.com/security/cve/CVE-2023-32435
advisory
https://www.cve.org/CVERecord?id=CVE-2023-32435
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-32435
article
https://webkitgtk.org/security/WSA-2023-0005.html
article
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
report
https://access.redhat.com/security/cve/CVE-2023-32439
advisory
https://www.cve.org/CVERecord?id=CVE-2023-32439
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-32439
report
https://access.redhat.com/security/cve/CVE-2023-35074
report
https://bugzilla.redhat.com/show_bug.cgi?id=2241403
advisory
https://www.cve.org/CVERecord?id=CVE-2023-35074
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-35074
report
https://access.redhat.com/security/cve/CVE-2023-37450
report
https://bugzilla.redhat.com/show_bug.cgi?id=2223000
advisory
https://www.cve.org/CVERecord?id=CVE-2023-37450
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-37450
report
https://access.redhat.com/security/cve/CVE-2023-38594
report
https://bugzilla.redhat.com/show_bug.cgi?id=2231018
advisory
https://www.cve.org/CVERecord?id=CVE-2023-38594
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-38594
article
https://webkitgtk.org/security/WSA-2023-0007.html
report
https://access.redhat.com/security/cve/CVE-2023-38595
report
https://bugzilla.redhat.com/show_bug.cgi?id=2231019
advisory
https://www.cve.org/CVERecord?id=CVE-2023-38595
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-38595

Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 21

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safa…

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.…

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6…

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15…

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2…

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iP…

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 an…

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS …

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, ma…

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, ma…

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, ma…

An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iP…

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7…

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPa…

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, …

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

References