Lucene search
Redhat.comRH:CVE-2024-40782HistoryJul 31, 2024 - 4:06 p.m.
CVE-2024-40782
2024-07-3116:06:51
redhat.com
access.redhat.com
6
memory management
ios 16.7.9
ipados 16.7.9
safari 17.6
watchos 10.6
tvos 17.6
visionos 1.3
macos sonoma 14.6
unexpected process crash
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.1
Confidence
High
A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.
Mitigation
Do not process or load untrusted web content with WebKitGTK.
Related
osv
osv
CVE-2024-40782
2024-07-29 23:15:11
Security update for webkit2gtk3
2024-08-16 13:49:19
Security update for webkit2gtk3
2024-08-14 07:48:17
cvelist
cvelist
CVE-2024-40782
2024-07-29 22:17:16
nvd
nvd
CVE-2024-40782
2024-07-29 23:15:11
vulnrichment
vulnrichment
CVE-2024-40782
2024-07-29 22:17:16
debiancve
debiancve
CVE-2024-40782
2024-07-29 23:15:11
cve
cve
CVE-2024-40782
2024-07-29 23:15:11
nessus
nessus
SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2024:2905-1)
2024-08-15 00:00:00
SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2024:2949-1)
2024-08-17 00:00:00
Fedora 40 : webkitgtk (2024-6b8845e3f0)
2024-08-27 00:00:00
openvas
openvas
openSUSE: Security Advisory for webkit2gtk3 (SUSE-SU-2024:2905-1)
2024-08-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2949-1)
2024-08-19 00:00:00
Fedora: Security Advisory (FEDORA-2024-6b8845e3f0)
2024-09-10 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: webkitgtk-2.44.3-2.fc39
2024-08-22 01:09:47
[SECURITY] Fedora 40 Update: webkitgtk-2.44.3-2.fc40
2024-08-27 17:08:53
[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.44.3-2.fc40
2024-08-27 17:08:55
apple
apple
About the security content of Safari 17.6
2024-07-29 00:00:00
About the security content of visionOS 1.3
2024-07-29 00:00:00
About the security content of tvOS 17.6
2024-07-29 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.1
Confidence
High
Related for RH:CVE-2024-40782