PT-2022-7519

Name of the Vulnerable Software and Affected Versions Apple Safari iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5 WebKitGTK versions prior to 2.44.2 WebKit2GTK versions prior to 2.44.2 Description This issue addresses a vulnerability where an attacker with arbitrary read and...

Debian: Security Advisory (DSA-5210-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: webkit2gtk3-2.36.6-1.fc35

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

USN-5568-1 webkit2gtk vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

USN-5568-1: WebKitGTK vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

Ubuntu 20.04 LTS / 22.04 LTS : WebKitGTK vulnerabilities (USN-5568-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5568-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website,...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2022-057423bfbf)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: webkit2gtk3-2.36.5-1.fc36

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

[ASA-202207-3] webkit2gtk: multiple issues

Arch Linux Security Advisory ASA-202207-3 ========================================= Severity: Critical Date : 2022-07-29 CVE-ID : CVE-2022-32792 CVE-2022-32816 Package : webkit2gtk Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2790 Summary ======= The package...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2022-6b749525f3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: webkit2gtk3-2.36.4-1.fc35

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

USN-5522-1 webkit2gtk vulnerabilities

Several security issues were discovered in WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

Ubuntu 20.04 LTS / 22.04 LTS : WebKitGTK vulnerabilities (USN-5522-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5522-1 advisory. Several security issues were discovered in WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a...

PT-2023-9414

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.36.8 WPE WebKit affected versions not specified Description A use-after-free vulnerability in the WebCore::RenderLayer::renderer function of the WebKitGTK and WPE WebKit rendering modules allows attackers to execu...

PT-2023-9411

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.36.8 WPE WebKit affected versions not specified Description A use-after-free vulnerability in the WebCore::RenderLayer::setNextSibling function of the WebKitGTK and WPE WebKit rendering modules is related to the u...

PT-2022-7520 · Webkitgtk +6 · Webkitgtk +6

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to 2.36.8 Description: A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags allows attackers to execute code remotely. This issue is related to the rendering of web pages and can be...

PT-2023-9412 · Apple +6 · Webkitgtk +7

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to 2.36.8 WPE WebKit affected versions not specified Description: A use-after-free vulnerability in the WebCore::RenderLayer::repaintBlockSelectionGaps function of the WebKitGTK and WPE WebKit rendering modules allows...

PT-2023-9413

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.36.8 WPE WebKit affected versions not specified Description A use-after-free vulnerability in the WebCore::RenderLayer::addChild function of WebKitGTK and WPE WebKit is related to the use of memory after it has be...

CVE-2022-26710

A use-after-free vulnerability was found in WebKitGTK. The flaw occurs when processing maliciously crafted HTML content in WebKit. This flaw allows a remote attacker to trick the victim into visiting a specially crafted website, triggering memory corruption and executing arbitrary code on the...

CVE-2022-22677

A vulnerability was found in WebKitGTK. This issue occurs due to a logic issue in video self-preview feature in a webRTC call, which can be interrupted if the user answers a phone call or the audio capture is interrupted. This flaw allows a remote attacker to perform a denial of service attack...