USN-6631-1 webkit2gtk vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

Fedora: Security Advisory for webkitgtk (FEDORA-2024-ca3f071aea)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS / 23.10 : WebKitGTK vulnerabilities (USN-6631-1)

The remote Ubuntu 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6631-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a...

[SECURITY] Fedora 38 Update: webkitgtk-2.42.5-1.fc38

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

Fedora 38 : webkitgtk (2024-ca3f071aea)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ca3f071aea advisory. Fix webkitwebcontextallowtlscertificateforhost to handle IPv6 URIs produced by SoupURI. Ignore stops with offset zero before last one when rendering...

[SECURITY] Fedora 39 Update: webkitgtk-2.42.5-1.fc39

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

Fedora: Security Advisory (FEDORA-2024-97faaca23d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : webkit2gtk3 (CESA-2023:3108)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3108 advisory. - A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with...

Fedora 39 : webkitgtk (2024-97faaca23d)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-97faaca23d advisory. Fix webkitwebcontextallowtlscertificateforhost to handle IPv6 URIs produced by SoupURI. Ignore stops with offset zero before last one when rendering...

WebKitGTK+: Multiple Vulnerabilities

Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Description Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE...

GLSA-202401-33 : WebKitGTK+: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202401-33 WebKitGTK+: Multiple Vulnerabilities - This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2. A user's password may be read aloud by VoiceOver...

CVE-2024-23222

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution due to a type confusion issue. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog. Mitigation Do not process or load untrusted web content...

PT-2024-7947

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17.3 iPadOS versions prior to 17.3 Safari versions prior to 17.3 tvOS versions prior to 17.3 macOS Sonoma versions prior to 14.3 watchOS versions prior to 10.3 Description A logic issue was addressed with improved checks....

USN-6582-1: WebKitGTK vulnerability

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

USN-6582-1 webkit2gtk vulnerability

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

Ubuntu 22.04 LTS / 23.04 / 23.10 : WebKitGTK vulnerability (USN-6582-1)

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6582-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a...

The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple’s operating systems such as iOS, iPadOS, tvOS, watchOS, macOS Sonoma, as well as the Safari browser, allows attackers to induce a service failure.

The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple’s iOS, iPadOS, tvOS, watchOS, macOS Sonoma, and Safari browsers exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures or malfunctions...

RLSA-2023:7716 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Arbitrary Remote Code Execution CVE-2023-42917 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

WebKitGTK+: Multiple Vulnerabilities

Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Description Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE...