Summary
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | webkit2gtk | 2.44.0-0ubuntu0.22.04.1 |
Vulnerabilities 8
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …
-
High 8.1
A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6,…
-
High 7.5
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 an…
-
High 7.5
An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4…
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, ma…
-
Medium 6.5
The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS …
-
Medium 6.5
A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 1…
-
Unscored —CVE-2024-23252 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
References
-
report
https://ubuntu.com/security/CVE-2023-42843
-
report
https://ubuntu.com/security/CVE-2023-42950
-
report
https://ubuntu.com/security/CVE-2023-42956
-
report
https://ubuntu.com/security/CVE-2024-23252
-
report
https://ubuntu.com/security/CVE-2024-23254
-
report
https://ubuntu.com/security/CVE-2024-23263
-
report
https://ubuntu.com/security/CVE-2024-23280
-
report
https://ubuntu.com/security/CVE-2024-23284