Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 22

• High 8.8
  CVE-2023-42917 Exploited

  A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu Wolfi
  Nov 30, 2023

  KEV Dec 4, 2023
• High 8.8
  CVE-2023-43000 Exploited

  A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Nov 5, 2025

  KEV Mar 5, 2026
• Critical 9.8
  CVE-2024-40782

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• High 8.8
  CVE-2022-32885

  A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…

  Apple macOS webkit2gtk webkit2gtk macOS Debian Ubuntu
  May 8, 2023
• High 8.8
  CVE-2023-42852

  A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 25, 2023
• High 8.8
  CVE-2023-42970

  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macO…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 11, 2025
• High 8.8
  CVE-2023-43010

  The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Mar 12, 2026
• High 8.8
  CVE-2024-54534

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi
  Dec 11, 2024
• High 8.1
  CVE-2025-43480

  The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• High 7.8
  CVE-2024-27856

  The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jan 15, 2025
• High 7.5
  CVE-2024-27808

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-27820

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-27833

  An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iP…

  Apple iOS and iPadOS tvOS visionOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-27851

  The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macO…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-4558

  Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi
  May 7, 2024
• High 7.3
  CVE-2023-42875

  Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 11, 2025
• Medium 6.5
  CVE-2024-40780

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• Medium 6.5
  CVE-2024-40789

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• Medium 5.5
  CVE-2024-40779

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• Medium 5.5
  CVE-2024-44185

  The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 24, 2024
• Medium 4.3
  CVE-2024-44244

  A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 28, 2024
• Unscored —
  CVE-2023-40397

  The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able …

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu
  Sep 6, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2236842
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238945
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253058
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2279689
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302067
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302069
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302070
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302071
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314697
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314698
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314700
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314704
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2323263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2323278
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9646.json
• report
  https://access.redhat.com/security/cve/CVE-2022-32885
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32885
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32885
• article
  https://webkitgtk.org/security/WSA-2023-0003.html
• report
  https://access.redhat.com/security/cve/CVE-2023-40397
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-40397
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-40397
• article
  https://wpewebkit.org/security/WSA-2023-0008.html
• report
  https://access.redhat.com/security/cve/CVE-2023-42852
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42852
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42852
• article
  https://webkitgtk.org/security/WSA-2023-0010.html
• report
  https://access.redhat.com/security/cve/CVE-2023-42875
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2366497
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42875
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42875
• article
  https://webkitgtk.org/security/WSA-2025-0004.html
• report
  https://access.redhat.com/security/cve/CVE-2023-42917
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42917
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42917
• article
  https://webkitgtk.org/security/WSA-2023-0011.html