Summary
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | webkit2gtk | 2.38.3-0ubuntu0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | webkit2gtk | 2.38.3-0ubuntu0.22.04.1 |
Vulnerabilities 7
-
High 8.8CVE-2022-42856 Exploited
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS…
KEV Dec 14, 2022 -
High 8.8CVE-2022-42867 EPSS 35%
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, ma…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, …
-
High 8.8
A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, …
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.…
-
Medium 6.5
A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for W…
References
-
report
https://ubuntu.com/security/CVE-2022-42852
-
report
https://ubuntu.com/security/CVE-2022-42856
-
report
https://ubuntu.com/security/CVE-2022-42867
-
report
https://ubuntu.com/security/CVE-2022-46692
-
report
https://ubuntu.com/security/CVE-2022-46698
-
report
https://ubuntu.com/security/CVE-2022-46699
-
report
https://ubuntu.com/security/CVE-2022-46700