CVE-2022-22677
A logic issue in the handling of concurrent media was addressed with improved state handling....
4.3 MediumFix available
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
0.78%Down 0.1 points since Nov 2, 2022
What each source reports
NVD Score used
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- Record
CVE-2022-22677- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
CVE List
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- Record
CVE-2022-22677- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
EUVDEUVD-2022-27822
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- Record
EUVD-2022-27822- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-q4jh-7c38-fcx6
A logic issue in the handling of concurrent media was addressed with improved state handling....
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- Record
GHSA-q4jh-7c38-fcx6- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVALPINE-CVE-2022-22677
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- Record
ALPINE-CVE-2022-22677- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-03
OSV
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- Record
CVE-2022-22677- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 9 moreShow less
OSVDEBIAN-CVE-2022-22677
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- Record
DEBIAN-CVE-2022-22677- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-03
OSVRHSA-2025:10364
Red Hat Security Advisory: webkitgtk4 security update
- Record
RHSA-2025:10364- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-22677
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- Record
UBUNTU-CVE-2022-22677- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVMGASA-2022-0254 No score
Updated webkit2 packages fix security vulnerability
The webkit2 package has been updated to version 2.36.4, fixing several security issues and other bugs.
- Record
MGASA-2022-0254- Updated
- 2026-11-02
OSVSUSE-SU-2022:2522-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.36.4 (bsc#1201221):
- CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
- CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
SUSE-SU-2022:2522-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2523-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.36.4 (bsc#1201221):
- CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
- CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
SUSE-SU-2022:2523-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2524-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.36.4 (bsc#1201221):
- CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
- CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
SUSE-SU-2022:2524-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2525-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.36.4 (bsc#1201221):
- CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
- CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.
- Record
SUSE-SU-2022:2525-1- Updated
- 2026-11-02
OSVUSN-5522-1 No score
webkit2gtk vulnerabilities
Several security issues were discovered in WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.
- Record
USN-5522-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtkAlpine:v3.16 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtkAlpine:v3.17 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtkAlpine:v3.18 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtkAlpine:v3.19 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtkAlpine:v3.20 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtk-5.0Alpine:v3.16 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtk-5.0Alpine:v3.17 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtk-6.0Alpine:v3.18 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtk-6.0Alpine:v3.19 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtk-6.0Alpine:v3.20 |
before 2.36.4-r0 | 2.36.4-r0 |
Show 75 moreShow less
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk-6.0Alpine:v3.21 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtk-6.0Alpine:v3.22 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtk-6.0Alpine:v3.23 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtk-6.0Alpine:v3.24 |
before 2.36.4-r0 | 2.36.4-r0 |
webkit2gtkDebian:12 |
before 2.36.4-1 | 2.36.4-1 |
webkit2gtkDebian:13 |
before 2.36.4-1 | 2.36.4-1 |
webkit2gtkDebian:14 |
before 2.36.4-1 | 2.36.4-1 |
wpewebkitDebian:12 |
before 2.36.4-1 | 2.36.4-1 |
wpewebkitDebian:13 |
before 2.36.4-1 | 2.36.4-1 |
wpewebkitDebian:14 |
before 2.36.4-1 | 2.36.4-1 |
webkit2gtkDebian:10 From an advisory covering 2 CVEs |
before 2.36.4-1~deb10u1, plus listed versions 2.24.2-12.24.2-22.24.3-12.24.3-1~bpo10+12.24.3-1~bpo9+1 Show 45 moreShow less2.24.3-1~deb10u12.24.4-12.24.4-1~bpo10+12.24.4-1~bpo9+12.24.4-1~deb10u12.25.1-12.25.2-12.25.4-12.25.92-12.26.0-12.26.1-12.26.1-22.26.1-32.26.1-3~bpo10+12.26.1-3~bpo9+12.26.1-3~bpo9+22.26.1-3~deb10u12.26.2-12.26.2-1~bpo9+12.26.2-1~deb10+12.26.3-12.26.3-1~bpo10+12.26.3-1~bpo9+12.26.3-1~deb10u12.26.4-12.26.4-1~bpo9+12.26.4-1~bpo9+22.26.4-1~bpo9+32.26.4-1~deb10u12.26.4-1~deb10u22.26.4-1~deb10u32.27.1-12.27.2-12.27.3-12.27.4-12.27.90-12.27.91-12.28.0-12.28.0-22.28.0-2~bpo10+12.28.1-12.28.1-22.28.1-2~bpo10+12.28.2-12.28.2-2 |
2.36.4-1~deb10u1 |
webkit2gtkDebian:11 From an advisory covering 2 CVEs |
before 2.36.4-1~deb11u1, plus listed versions 2.32.3-12.32.4-12.32.4-1~deb10u12.32.4-1~deb11u12.33.1-1 Show 36 moreShow less2.33.2-12.33.3-12.33.90-12.33.91-12.34.0-12.34.0-1~bpo11+12.34.1-12.34.1-1~deb10u12.34.1-1~deb11u12.34.2-12.34.2-1~bpo11+12.34.3-12.34.3-1~deb10u12.34.3-1~deb11u12.34.4-12.34.4-1~deb10u12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb10u12.34.6-1~deb11u12.35.1-12.35.2-12.35.3-12.35.90-12.36.0-12.36.0-22.36.0-32.36.0-3~deb10u12.36.0-3~deb11u12.36.1-12.36.2-12.36.3-12.36.3-1~deb10u12.36.3-1~deb11u12.36.4-1~deb10u1 |
2.36.4-1~deb11u1 |
wpewebkitDebian:11 From an advisory covering 2 CVEs |
before 2.36.4-1~deb11u1, plus listed versions 2.32.3-22.32.4-12.32.4-1~deb11u12.34.1-12.34.1-1~deb11u1 Show 14 moreShow less2.34.2-12.34.3-12.34.3-1~deb11u12.34.4-12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb11u12.36.0-12.36.0-22.36.0-2~deb11u12.36.1-12.36.3-12.36.3-1~deb11u1 |
2.36.4-1~deb11u1 |
webkit2Mageia:8 From an advisory covering 3 CVEs |
before 2.36.4-1.mga8 | 2.36.4-1.mga8 |
webkitgtk4Red Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-debuginfoRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-develRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-jscRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-jsc-develRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-docRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkit2gtk3SUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 2.36.4-2.102.1 | 2.36.4-2.102.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 3 CVEs |
before 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 3 CVEs |
before 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP4 From an advisory covering 3 CVEs |
before 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 |
webkit2gtk3openSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 |
webkit2gtk3-soup2openSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 |
webkit2gtk4openSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15-LTSS From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Enterprise Storage 6 From an advisory covering 3 CVEs |
before 2.36.4-150000.3.106.1 | 2.36.4-150000.3.106.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Manager Proxy 4.1 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Manager Retail Branch Server 4.1 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Manager Server 4.1 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3SUSE:Enterprise Storage 7 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3openSUSE:Leap 15.3 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
webkit2gtk3openSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 2.36.4-150200.38.2 | 2.36.4-150200.38.2 |
qtwebkit-opensource-srcUbuntu:16.04:LTS |
All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 |
None known |
webkit2gtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1 Show 21 moreShow less2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1 |
None known |
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
webkitgtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 |
None known |
webkit2gtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 33 moreShow less2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.12.24.4-0ubuntu0.18.04.12.26.1-0ubuntu0.18.04.12.26.2-0ubuntu0.18.04.12.26.3-0ubuntu0.18.04.12.26.4-0ubuntu0.18.04.12.28.0-0ubuntu0.18.04.32.28.1-0ubuntu0.18.04.12.28.2-0ubuntu0.18.04.12.28.3-0ubuntu0.18.04.12.28.4-0ubuntu0.18.04.12.30.3-0ubuntu0.18.04.12.30.5-0ubuntu0.18.04.12.30.6-0ubuntu0.18.04.12.32.0-0ubuntu0.18.04.12.32.3-0ubuntu0.18.04.12.32.4-0ubuntu0.18.04.1 |
None known |
qtwebkit-opensource-srcUbuntu:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1 |
None known |
qtwebkit-sourceUbuntu:18.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu13 |
None known |
webkitgtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3 |
None known |
webkit2gtkUbuntu:20.04:LTS |
before 2.36.4-0ubuntu0.20.04.1, plus listed versions 2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2 Show 17 moreShow less2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.1 |
2.36.4-0ubuntu0.20.04.1 |
qtwebkit-opensource-srcUbuntu:20.04:LTS |
All versions, plus listed versions 5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1 |
None known |
wpewebkitUbuntu:20.04:LTS |
All versions, plus listed versions 2.26.3-12.26.4-12.26.4-1build12.28.0-12.28.1-1 |
None known |
qtwebkit-opensource-srcUbuntu:22.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1 |
None known |
webkit2gtkUbuntu:22.04:LTS |
before 2.36.4-0ubuntu0.22.04.1, plus listed versions 2.34.0-1ubuntu12.34.1-1ubuntu12.34.2-1ubuntu12.34.3-12.35.3-1ubuntu1 Show 4 moreShow less2.35.90-1ubuntu12.36.0-2ubuntu12.36.2-0ubuntu0.22.04.12.36.3-0ubuntu0.22.04.1 |
2.36.4-0ubuntu0.22.04.1 |
wpewebkitUbuntu:22.04:LTS |
All versions, plus listed versions 2.32.4-12.34.1-12.34.2-12.34.3-12.34.4-1 Show 4 moreShow less2.34.5-12.34.6-12.36.0-2ubuntu22.36.0-2ubuntu3 |
None known |
qtwebkit-opensource-srcUbuntu:24.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36 |
None known |
webkit2gtkUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2.36.4-0ubuntu0.20.04.1, plus listed versions 2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2 Show 17 moreShow less2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.1 |
2.36.4-0ubuntu0.20.04.1 |
webkit2gtkUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 2.36.4-0ubuntu0.22.04.1, plus listed versions 2.34.0-1ubuntu12.34.1-1ubuntu12.34.2-1ubuntu12.34.3-12.35.3-1ubuntu1 Show 4 moreShow less2.35.90-1ubuntu12.36.0-2ubuntu12.36.2-0ubuntu0.22.04.12.36.3-0ubuntu0.22.04.1 |
2.36.4-0ubuntu0.22.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-22677 is a medium vulnerability (CVSS 4.3) in Apple Ipados, published July 7, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. Fixed in webkit2gtk 2.36.4-r0.
References
support.apple.com/en-us/HT213258
nvd.nist.gov/vuln/detail/CVE-2022-22677
github.com/advisories/GHSA-q4jh-7c38-fcx6
security.alpinelinux.org/vuln/CVE-2022-22677
security-tracker.debian.org/tracker/CVE-2022-22677
Show 194 moreShow less
advisories.mageia.org/MGASA-2022-0254.html
bugs.mageia.org/show_bug.cgi?id=30608
webkitgtk.org/2022/07/05/webkitgtk2.36.4-released.html
access.redhat.com/errata/RHSA-2025:10364
bugzilla.redhat.com/show_bug.cgi?id=1879532
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10364.json
cve.org/CVERecord?id=CVE-2014-1745
cisa.gov/known-exploited-vulnerabilities-catalog
talosintelligence.com/vulnerability_reports/TALOS-2020-1214
wpewebkit.org/security/WSA-2022-0007.html
bugs.webkit.org/show_bug.cgi?id=242683
seclists.org/fulldisclosure/2024/Mar/21
suse.com/support/update/announcement/2022/suse-su-20222522-1
bugzilla.suse.com/1201221
ubuntu.com/security/CVE-2022-22677
This page doesn't list everything
Left out here: 76 versions and 814 references. The JSON record has them.