Summary
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | webkit2gtk | 2.40.5-0ubuntu0.22.04.1 |
Vulnerabilities 9
-
High 8.8CVE-2023-38600 Public exploit
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, t…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macO…
References
-
report
https://ubuntu.com/security/CVE-2023-38133
-
report
https://ubuntu.com/security/CVE-2023-38572
-
report
https://ubuntu.com/security/CVE-2023-38592
-
report
https://ubuntu.com/security/CVE-2023-38594
-
report
https://ubuntu.com/security/CVE-2023-38595
-
report
https://ubuntu.com/security/CVE-2023-38597
-
report
https://ubuntu.com/security/CVE-2023-38599
-
report
https://ubuntu.com/security/CVE-2023-38600
-
report
https://ubuntu.com/security/CVE-2023-38611