Lucene search
Veracode Vulnerability DatabaseVERACODE:35155HistoryApr 18, 2022 - 6:41 p.m.
Use-After-Free
2022-04-1818:41:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
25
vulnerability
memory management
remote attacker
web content
software
EPSS
0.003
Percentile
70.7%
webkit2gtk:edge is vulnerable to use after free. The vulnerability exist due to that improved memory management flaw which allows a remote attacker to process maliciously crafted web content.
Affected configurations
Node
-webkit2gtk\Matchedge2.32.2-r0
OR-webkit2gtk\Matchedge2.28.2-r0
OR-webkit2gtk\Matchedge2.34.4-r1
OR-webkit2gtk\Matchedge2.30.6-r0
OR-webkit2gtk\Matchedge2.28.1-r0
OR-webkit2gtk\Matchedge2.34.3-r0
OR-webkit2gtk\Matchedge2.34.6-r0
OR-webkit2gtk\Matchedge2.32.4-r0
OR-webkit2gtk\Matchedge2.32.0-r1
OR-webkit2gtk\Matchedge2.32.1-r0
OR-webkit2gtk\Matchedge2.26.4-r3
OR-webkit2gtk\Matchedge2.30.5-r0
OR-webkit2gtk\Matchedge2.28.0-r2
OR-webkit2gtk\Matchedge2.32.0-r0
OR-webkit2gtk\Matchedge2.28.0-r0
OR-webkit2gtk\Matchedge2.32.3-r0
OR-webkit2gtk\Matchedge2.34.1-r0
OR-webkit2gtk\Matchedge2.28.0-r1
OR-webkit2gtk\Matchedge2.34.0-r1
OR-webkit2gtk\Matchedge2.34.2-r0
OR-webkit2gtk\Matchedge2.32.2-r0
OR-webkit2gtk\Matchedge2.28.2-r0
OR-webkit2gtk\Matchedge2.34.4-r1
OR-webkit2gtk\Matchedge2.30.6-r0
OR-webkit2gtk\Matchedge2.28.1-r0
OR-webkit2gtk\Matchedge2.34.3-r0
OR-webkit2gtk\Matchedge2.34.6-r0
OR-webkit2gtk\Matchedge2.32.4-r0
OR-webkit2gtk\Matchedge2.32.0-r1
OR-webkit2gtk\Matchedge2.32.1-r0
OR-webkit2gtk\Matchedge2.26.4-r3
OR-webkit2gtk\Matchedge2.30.5-r0
OR-webkit2gtk\Matchedge2.28.0-r2
OR-webkit2gtk\Matchedge2.32.0-r0
OR-webkit2gtk\Matchedge2.28.0-r0
OR-webkit2gtk\Matchedge2.32.3-r0
OR-webkit2gtk\Matchedge2.34.1-r0
OR-webkit2gtk\Matchedge2.28.0-r1
OR-webkit2gtk\Matchedge2.34.0-r1
OR-webkit2gtk\Matchedge2.34.2-r0
OR-webkit2gtk3Match2.22.6_1.el8
ORwebkitgtkwebkitgtkMatch1.2.6_5.el6
ORwebkitgtkwebkitgtkMatch1.4.3_8.el6
ORwebkitgtkwebkitgtkMatch1.4.3_9.el6_6
ORwebkitgtkwebkitgtkMatch1.2.6_2.el6_0
ORwebkitgtkwebkitgtkMatch1.2.3_1.el6
OR-webkitgtk4Match2.22.7_2.el7
OR-webkitgtk4Match2.28.2_3.el7
OR-webkitgtk4Match2.28.2_2.el7
OR-webkitgtk4Match2.20.5_1.el7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.32.2-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.2-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.34.4-r1:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.30.6-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.1-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.34.3-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.34.6-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.32.4-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.32.0-r1:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.32.1-r0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2022-22628
2022-09-23 19:15:11
cvelist
cvelist
CVE-2022-22628
2022-09-23 18:58:31
redhatcve
redhatcve
CVE-2022-22628
2022-04-11 05:32:19
cve
cve
CVE-2022-22628
2022-09-23 19:15:11
ubuntucve
ubuntucve
CVE-2022-22628
2022-04-08 00:00:00
debiancve
debiancve
CVE-2022-22628
2022-09-23 19:15:11
alpinelinux
alpinelinux
CVE-2022-22628
2022-09-23 19:15:11
prion
prion
Design/Logic Flaw
2022-09-23 19:15:00
debian
debian
[SECURITY] [DSA 5115-1] webkit2gtk security update
2022-04-08 23:36:49
[SECURITY] [DSA 5116-1] wpewebkit security update
2022-04-08 23:37:04
nessus
nessus
Ubuntu 20.04 LTS : WebKitGTK vulnerabilities (USN-5394-1)
2022-04-28 00:00:00
SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2022:1431-1)
2022-04-28 00:00:00
SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2022:1511-1)
2022-05-04 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0139)
2022-04-14 00:00:00
Debian: Security Advisory (DSA-5116-1)
2022-04-20 00:00:00
Debian: Security Advisory (DSA-5115-1)
2022-04-20 00:00:00
ubuntu
ubuntu
WebKitGTK vulnerabilities
2022-04-28 00:00:00
osv
osv
wpewebkit - security update
2022-04-08 00:00:00
webkit2gtk - security update
2022-04-08 00:00:00
webkit2gtk vulnerabilities
2022-04-28 12:40:40
mageia
mageia
Updated webkit2 packages fix security vulnerability
2022-04-13 19:06:19
suse
suse
Security update for webkit2gtk3 (important)
2022-04-27 00:00:00
apple
apple
About the security content of Safari 15.4
2022-03-15 00:00:00
About the security content of tvOS 15.4
2022-03-14 00:00:00
About the security content of watchOS 8.5
2022-03-14 00:00:00
rocky
rocky
webkit2gtk3 security and bug fix update
2022-11-15 06:14:22
webkit2gtk3 security and bug fix update
2022-11-08 06:26:46
almalinux
almalinux
Moderate: webkit2gtk3 security and bug fix update
2022-11-08 00:00:00
Moderate: webkit2gtk3 security and bug fix update
2022-11-15 00:00:00
oraclelinux
oraclelinux
webkit2gtk3 security and bug fix update
2022-11-15 00:00:00
webkit2gtk3 security and bug fix update
2022-11-22 00:00:00
redhat
redhat
(RHSA-2022:7704) Moderate: webkit2gtk3 security and bug fix update
2022-11-08 06:26:46
(RHSA-2022:8054) Moderate: webkit2gtk3 security and bug fix update
2022-11-15 06:14:22
(RHSA-2023:0918) Moderate: Service Binding Operator security update
2023-02-27 00:54:13
gentoo
gentoo
WebKitGTK+: Multiple Vulnerabilities
2022-08-31 00:00:00