Skip to content
OpenAdvisories
High · 8.8 Known exploited Public exploit CVE-2023-28205 EUVD-2023-31913GHSA-6qjh-p74q-89mv

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, i…

Published Apr 10, 2023 · Updated Oct 21, 2025 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: Safari Package: qtwebkit-opensource-src Package: qtwebkit-source Package: webkit2gtk Package: webkit2gtk Package: webkitgtk Package: wpewebkit Package: wpewebkit Platform: iOS Platform: macOS Category: Browsers Ecosystem: Debian Ecosystem: Ubuntu

Description

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS unspecified – < 15.7, unspecified – < 16.4 15.7
Apple Safari unspecified – < 16.4 16.4
Apple macOS unspecified – < 13.3 13.3

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 webkit2gtk 2.40.1-1 —
Debian 14 wpewebkit 2.38.6-1 —
Debian 13 webkit2gtk 2.40.1-1 —
Debian 13 wpewebkit 2.38.6-1 —
Debian 12 webkit2gtk 2.40.1-1 —
Debian 12 wpewebkit 2.38.6-1 —
Debian 11 webkit2gtk 2.40.1-1~deb11u1 DSA-5396-1
Debian 11 wpewebkit 2.38.6-1~deb11u1 DSA-5397-1
Debian 10 webkit2gtk 2.38.6-0+deb10u1 DLA-3419-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS qtwebkit-opensource-src No fix yet —
Ubuntu 22.04 LTS webkit2gtk 2.38.6-0ubuntu0.22.04.1 USN-6061-1
Ubuntu 22.04 LTS wpewebkit +1 No fix yet —
Ubuntu 20.04 LTS webkit2gtk 2.38.6-0ubuntu0.20.04.1 USN-6061-1
Ubuntu 20.04 LTS wpewebkit +1 No fix yet —
Ubuntu 18.04 LTS webkitgtk +3 No fix yet —
Ubuntu 16.04 LTS webkitgtk +3 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 webkit2gtk3 +3 2.36.7-1.el9_1.3 RHSA-2023:1918
RHEL 8 webkit2gtk3 +3 2.36.7-1.el8_7.3 RHSA-2023:1919
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7 ELS webkitgtk4 +4 2.48.3-2.el7_9 RHSA-2025:10364

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 webkit2gtk3 +3 2.36.7-1.el9_1.3 ALSA-2023:2653, ALSA-2023:1918
AlmaLinux 8 webkit2gtk3 +3 2.36.7-1.el8_7.3 ALSA-2023:3108, ALSA-2023:1919

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 webkit2gtk3 2.36.7-1.el9_1.3 RLSA-2023:1918
Rocky Linux 8 webkit2gtk3 2.36.7-1.el8_7.3 RLSA-2023:1919

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP4 webkit2gtk3 +2 2.38.6-150400.4.39.1 SUSE-SU-2023:2065-1
SLES 15 SP3 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SLES 15 SP2 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SLES 15 SP1 webkit2gtk3 2.38.6-150000.3.139.1 SUSE-SU-2023:2078-1
SLES 12 SP5 webkit2gtk3 2.38.6-2.136.1 SUSE-SU-2023:2056-1
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 webkit2gtk3 2.38.6-2.136.1 SUSE-SU-2023:2056-1
SLES 12 SP2 webkit2gtk3 2.38.6-2.136.1 SUSE-SU-2023:2056-1
SLES for SAP 15 SP3 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SLES for SAP 15 SP2 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SLES for SAP 15 SP1 webkit2gtk3 2.38.6-150000.3.139.1 SUSE-SU-2023:2078-1
SLES for SAP 12 SP5 webkit2gtk3 2.38.6-2.136.1 SUSE-SU-2023:2056-1
SLES for SAP 12 SP4 webkit2gtk3 2.38.6-2.136.1 SUSE-SU-2023:2056-1
SLE Real Time 15 SP3 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SLE HPC 15 SP3 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SLE HPC 15 SP2 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SLE HPC 15 SP1 webkit2gtk3 2.38.6-150000.3.139.1 SUSE-SU-2023:2078-1
SUSE OpenStack Cloud Crowbar 9 webkit2gtk3 2.38.6-2.136.1 SUSE-SU-2023:2056-1
SUSE OpenStack Cloud 9 webkit2gtk3 2.38.6-2.136.1 SUSE-SU-2023:2056-1
SUSE Manager Server 4.2 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SUSE Manager Proxy 4.2 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SUSE Enterprise Storage 7.1 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1
SUSE Enterprise Storage 7 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.4 webkit2gtk3 2.38.6-150200.72.1 SUSE-SU-2023:2077-1, SUSE-SU-2023:2065-1
openSUSE Leap 15.4 webkit2gtk4 +1 2.38.6-150400.4.39.1 SUSE-SU-2023:2065-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 webkitgtk4 +3 2.38.5-3.amzn2.0.1 ALAS2-2023-2088

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 webkit2gtk3 +3 2.36.7-1.el9_1.3 ELSA-2023-1918
Oracle Linux 8 webkit2gtk3 +3 2.36.7-1.el8_7.3 ELSA-2023-1919

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 21

References