Summary
A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | webkit2gtk | 2.20.3-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | webkit2gtk | 2.20.3-0ubuntu0.18.04.1 |
Vulnerabilities 7
-
High 8.8
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iClou…
-
Unscored —
The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebK…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iClou…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iClou…
-
Unscored —CVE-2018-4218 Public exploit
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iClou…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iClou…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iClou…
References
-
report
https://ubuntu.com/security/CVE-2018-4190
-
report
https://ubuntu.com/security/CVE-2018-4199
-
report
https://ubuntu.com/security/CVE-2018-4218
-
report
https://ubuntu.com/security/CVE-2018-4222
-
report
https://ubuntu.com/security/CVE-2018-4232
-
report
https://ubuntu.com/security/CVE-2018-4233
-
report
https://ubuntu.com/security/CVE-2018-12293