USN-6426-1 — webkit2gtk vulnerabilities

Summary

Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	webkit2gtk	2.42.1-0ubuntu0.22.04.1

Vulnerabilities 3

High 8.8

CVE-2023-41993 Exploited Public exploit EPSS 24%

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi

Sep 21, 2023
KEV Sep 25, 2023
High 8.8

CVE-2023-39928

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page…

WebKit WebKit qtwebkit-source qtwebkit-opensource-src Browsers Debian Ubuntu

Oct 6, 2023
High 8.8

CVE-2023-41074

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Sep 26, 2023

References

report
https://ubuntu.com/security/CVE-2023-39928
report
https://ubuntu.com/security/CVE-2023-41074
report
https://ubuntu.com/security/CVE-2023-41993

webkit2gtk vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 3

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page…

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS …

References