Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 27

Vulnerabilities 30

• High 8.8
  CVE-2022-48503 Exploited

  The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Aug 14, 2023

  KEV Oct 20, 2025
• High 8.8
  CVE-2023-42917 Exploited

  A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu Wolfi
  Nov 30, 2023

  KEV Dec 4, 2023
• High 8.8
  CVE-2023-43000 Exploited

  A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Nov 5, 2025

  KEV Mar 5, 2026
• High 8.8
  CVE-2024-23222 Exploited Public exploit EPSS 11%

  A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15…

  Apple macOS iOS and iPadOS tvOS macOS iOS Browsers Debian Ubuntu
  Jan 23, 2024

  KEV Jan 23, 2024
• Critical 9.8
  CVE-2024-40782

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• Critical 9.8
  CVE-2025-24264

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iP…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Mar 31, 2025
• High 8.8
  CVE-2022-32885

  A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…

  Apple macOS webkit2gtk webkit2gtk macOS Debian Ubuntu
  May 8, 2023
• High 8.8
  CVE-2023-42852

  A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 25, 2023
• High 8.8
  CVE-2023-42970

  A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macO…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 11, 2025
• High 8.8
  CVE-2023-43010

  The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Mar 12, 2026
• High 8.8
  CVE-2024-54534

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi
  Dec 11, 2024
• High 8.8
  CVE-2025-31204

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  May 12, 2025
• High 8.1
  CVE-2025-43480

  The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Nov 4, 2025
• High 8.0
  CVE-2025-24223

  The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  May 12, 2025
• High 7.8
  CVE-2024-27856

  The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jan 15, 2025
• High 7.5
  CVE-2024-27808

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-27820

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-27833

  An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iP…

  Apple iOS and iPadOS tvOS visionOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-27851

  The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macO…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-4558

  Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi
  May 7, 2024
• High 7.3
  CVE-2023-42875

  Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Apr 11, 2025
• Medium 6.5
  CVE-2024-40776

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• Medium 6.5
  CVE-2024-40780

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• Medium 6.5
  CVE-2024-40789

  An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• Medium 6.5
  CVE-2025-31215

  The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  May 12, 2025
• Medium 5.5
  CVE-2024-40779

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 29, 2024
• Medium 5.5
  CVE-2024-44185

  The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 24, 2024
• Medium 4.3
  CVE-2024-44244

  A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 28, 2024
• Medium 4.3
  CVE-2025-31206

  A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPa…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  May 12, 2025
• Unscored —
  CVE-2023-40397

  The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able …

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu
  Sep 6, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2236842
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238945
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253058
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2259893
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2279689
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2301841
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302067
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302069
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302070
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302071
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314697
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314698
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314700
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314704
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2323263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2323278
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9653.json
• report
  https://access.redhat.com/security/cve/CVE-2022-32885
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32885
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32885
• article
  https://webkitgtk.org/security/WSA-2023-0003.html
• report
  https://access.redhat.com/security/cve/CVE-2022-48503
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2218623
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-48503
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-48503
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2023-40397
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-40397
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-40397
• article
  https://wpewebkit.org/security/WSA-2023-0008.html
• report
  https://access.redhat.com/security/cve/CVE-2023-42852
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42852
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42852
• article
  https://webkitgtk.org/security/WSA-2023-0010.html
• report
  https://access.redhat.com/security/cve/CVE-2023-42875
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2366497