Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 13

• High 8.8
  CVE-2023-42917 Exploited

  A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu Wolfi
  Nov 30, 2023

  KEV Dec 4, 2023
• High 8.8
  CVE-2023-43000 Exploited

  A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Nov 5, 2025

  KEV Mar 5, 2026
• Critical 9.8
  CVE-2023-40414

  A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPa…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jan 10, 2024
• High 8.8
  CVE-2023-39928

  A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page…

  WebKit WebKit qtwebkit-source qtwebkit-opensource-src Browsers Debian Ubuntu
  Oct 6, 2023
• High 8.8
  CVE-2023-42852

  A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 25, 2023
• High 8.8
  CVE-2023-42970

  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macO…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 11, 2025
• High 7.3
  CVE-2023-42875

  Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 11, 2025
• High 7.3
  CVE-2024-23271

  A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS S…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 24, 2024
• High 7.1
  CVE-2014-1745

  Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows …

  chromium-browser webkit2gtk wpewebkit Debian Ubuntu
  May 21, 2014
• Unscored —
  CVE-2023-32359

  This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS…

  Apple iOS and iPadOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu
  Oct 25, 2023
• Unscored —
  CVE-2023-41983

  The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Oct 25, 2023
• Unscored —
  CVE-2023-42883

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Dec 12, 2023
• Unscored —
  CVE-2023-42890

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 1…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Dec 12, 2023

References

• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.4_release_notes/index
• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2241400
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253058
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2254326
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2254327
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270143
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2270151
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271449
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271453
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314696
• article
  https://issues.redhat.com/browse/RHEL-3960
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2126.json
• report
  https://access.redhat.com/security/cve/CVE-2014-1745
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-1745
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-1745
• article
  https://webkitgtk.org/security/WSA-2024-0001.html
• report
  https://access.redhat.com/security/cve/CVE-2023-32359
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-32359
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-32359
• article
  https://webkitgtk.org/security/WSA-2023-0010.html
• report
  https://access.redhat.com/security/cve/CVE-2023-39928
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-39928
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-39928
• article
  https://webkitgtk.org/security/WSA-2023-0009.html
• report
  https://access.redhat.com/security/cve/CVE-2023-40414
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-40414
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-40414
• report
  https://access.redhat.com/security/cve/CVE-2023-41983
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-41983
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-41983
• report
  https://access.redhat.com/security/cve/CVE-2023-42852
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42852
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42852
• report
  https://access.redhat.com/security/cve/CVE-2023-42875
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2366497
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42875
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42875