Red Hat Security Advisory: webkit2gtk3 security update
🔗 CVE IDs covered (20)
📋 Description
CVE-2023-43010 — webkitgtk: Processing maliciously crafted web content may lead to memory corruption CVE-2024-4558 — chromium-browser: Use after free in ANGLE CVE-2024-23254 — webkit: malicious website may exfiltrate audio data cross-origin CVE-2024-23263 — webkit: processing malicious web content prevents Content Security Policy from being enforced CVE-2024-23280 — webkit: maliciously crafted webpage may be able to fingerprint the user CVE-2024-23284 — webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced CVE-2024-27820 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2024-27838 — webkitgtk: A maliciously crafted webpage may be able to fingerprint the user CVE-2024-27851 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2024-27856 — webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution CVE-2024-40776 — webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution CVE-2024-40779 — webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking CVE-2024-40780 — webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking CVE-2024-40782 — webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management CVE-2024-40789 — webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-40866 — webkitgtk: Visiting a malicious website may lead to address bar spoofing CVE-2024-44185 — webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-44187 — webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2024-54534 — webkit: Processing maliciously crafted web content may lead to memory corruption CVE-2025-43480 — webkitgtk: A malicious website may exfiltrate data cross-origin
🔗 References (21)
- selfhttps://access.redhat.com/errata/RHSA-2024:8180
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2270289
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2270290
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2270291
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2270292
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2279689
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2301841
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2302067
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2302069
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2302070
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2302071
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2312724
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2314698
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2314702
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2314704
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2314706
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2323263
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2333846
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2344618
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8180.json