Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
Apple WebKit lets crafted web pages run code
published 1 year ago
Summary
Web pages viewed in Safari or other apps that use Apple's WebKit engine on iPhone, iPad, Mac, Apple TV, or other platforms could be tricked into running unwanted code. This could let attackers take control of the device or access data. Update all Apple devices and any software that includes WebKit to the latest releases as soon as possible.
What to do
- Update redhat webkit2gtk3 to version 0:2.46.3-1.el8_4.
- Update redhat webkit2gtk3-debuginfo to version 0:2.46.3-1.el8_4.
- Update redhat webkit2gtk3-debugsource to version 0:2.46.3-1.el8_4.
- Update redhat webkit2gtk3-devel to version 0:2.46.3-1.el8_4.
- Update redhat webkit2gtk3-devel-debuginfo to version 0:2.46.3-1.el8_4.
- Update redhat webkit2gtk3-jsc to version 0:2.46.3-1.el8_4.
- Update redhat webkit2gtk3-jsc-debuginfo to version 0:2.46.3-1.el8_4.
- Update redhat webkit2gtk3-jsc-devel to version 0:2.46.3-1.el8_4.
- Update redhat webkit2gtk3-jsc-devel-debuginfo to version 0:2.46.3-1.el8_4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3 |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3-debugsource |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3-devel |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3-devel-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3-jsc |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3-jsc-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3-jsc-devel |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | webkit2gtk3-jsc-devel-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3 |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3-debugsource |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3-devel |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3-devel-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3-jsc |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3-jsc-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3-jsc-devel |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | webkit2gtk3-jsc-devel-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3 |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3-debugsource |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3-devel |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3-devel-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3-jsc |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3-jsc-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3-jsc-devel |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | webkit2gtk3-jsc-devel-debuginfo |
< 0:2.46.3-1.el8_4 Fix: upgrade to 0:2.46.3-1.el8_4
|
Original advisory text
Red Hat Security Advisory: webkit2gtk3 security update
References
- https://access.redhat.com/errata/RHSA-2024:9679 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2236842 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2238945 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2253058 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2259893 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2271456 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2279689 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2301841 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302067 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302069 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302070 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302071 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2314697 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2314698 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2314700 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2314704 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2323263 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2323278 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9679.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-32885 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-32885 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-32885 Vendor Advisory
- https://webkitgtk.org/security/WSA-2023-0003.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2022-48503 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2218623 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-48503 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-48503 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-40397 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-40397 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-40397 Vendor Advisory
- https://wpewebkit.org/security/WSA-2023-0008.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-42852 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-42852 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-42852 Vendor Advisory
- https://webkitgtk.org/security/WSA-2023-0010.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-42875 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366497 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-42875 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-42875 Vendor Advisory
- https://webkitgtk.org/security/WSA-2025-0004.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-42917 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-42917 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-42917 Vendor Advisory
- https://webkitgtk.org/security/WSA-2023-0011.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-42970 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366498 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-42970 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-42970 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-43000 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2416324 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-43000 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-43000 Vendor Advisory
- https://webkitgtk.org/security/WSA-2025-0008.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-4558 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-4558 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-4558 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-23222 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-23222 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-23222 Vendor Advisory
- https://webkitgtk.org/security/WSA-2024-0001.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-27808 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-27808 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-27808 Vendor Advisory
- https://webkitgtk.org/security/WSA-2024-0005.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-27820 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-27820 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-27820 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-27833 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-27833 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-27833 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-27851 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-27851 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-27851 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-27856 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2344618 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-27856 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-27856 Vendor Advisory
- https://support.apple.com/en-us/120896 Third Party Advisory
- https://support.apple.com/en-us/120898 Third Party Advisory
- https://support.apple.com/en-us/120901 Third Party Advisory
- https://support.apple.com/en-us/120902 Third Party Advisory
- https://support.apple.com/en-us/120903 Third Party Advisory
- https://support.apple.com/en-us/120905 Third Party Advisory
- https://support.apple.com/en-us/120906 Third Party Advisory
- https://webkitgtk.org/security/WSA-2025-0001.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-40776 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-40776 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-40776 Vendor Advisory
- https://webkitgtk.org/security/WSA-2024-0004.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-40779 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-40779 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-40779 Vendor Advisory
- https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-40780 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-40780 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-40780 Vendor Advisory
- https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-40782 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-40782 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-40782 Vendor Advisory
- https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-40789 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-40789 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-40789 Vendor Advisory
- https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-44185 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-44185 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-44185 Vendor Advisory
- https://webkitgtk.org/security/WSA-2024-0006.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-44244 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-44244 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-44244 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-54534 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2333846 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-54534 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-54534 Vendor Advisory
- https://support.apple.com/en-us/121837 Third Party Advisory
- https://support.apple.com/en-us/121839 Third Party Advisory
- https://support.apple.com/en-us/121843 Third Party Advisory
- https://support.apple.com/en-us/121844 Third Party Advisory
- https://support.apple.com/en-us/121845 Third Party Advisory
- https://support.apple.com/en-us/121846 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-24223 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366499 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-24223 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-24223 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-24264 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2357918 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-24264 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-24264 Vendor Advisory
- https://webkitgtk.org/security/WSA-2025-0003.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-31204 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366500 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-31204 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-31204 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-31206 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366502 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-31206 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-31206 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-31215 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2366503 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-31215 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-31215 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-43480 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2416338 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-43480 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-43480 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published21 Nov 2024
Updated6 Mar 2026
First seen6 Mar 2026
Sources
RHSA-2024:9679 · OSV
Track software like this
Free during beta