CVE-2023-42852
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
- Record
CVE-2023-42852- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
CVE List
8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
- Record
CVE-2023-42852- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2023-47273
8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
- Record
EUVD-2023-47273- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jmh8-4h3g-x5g5
8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
- Record
GHSA-jmh8-4h3g-x5g5- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
- Record
CVE-2023-42852- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-42852
8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
- Record
DEBIAN-CVE-2023-42852- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 18 moreShow less
OSVRHSA-2024:2126
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:2126- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2982
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:2982- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:8492
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:8492- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:8496
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:8496- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:9646
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:9646- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:9653
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:9653- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:9679
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:9679- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:9680
9.8
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2024:9680- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10364
10.0
Red Hat Security Advisory: webkitgtk4 security update
- Record
RHSA-2025:10364- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-42852
8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
- Record
UBUNTU-CVE-2023-42852- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2024:2126 No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
- webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)
- webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
- webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)
- webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
- webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
- webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
- webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2126- Updated
- 2026-11-02
OSVALSA-2024:2982 No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
- webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
- webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)
- webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
- webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)
- webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
- webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
- webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
- webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:2982- Updated
- 2026-11-05
OSVRLSA-2024:2982 No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
-
webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
-
webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
-
webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
-
webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)
-
webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
-
webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)
-
webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
-
webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
-
webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
-
webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.
- Record
RLSA-2024:2982- Updated
- 2026-11-02
OSVSUSE-SU-2023:4558-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.2 (bsc#1217210):
- CVE-2023-41983: Processing web content may lead to a denial-of-service.
- CVE-2023-42852: Processing web content may lead to arbitrary code execution.
Already previously fixed:
- CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4).
- CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0).
- CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).
Bug fixes:
- Disable DMABuf renderer for NVIDIA proprietary drivers (bsc#1216778).
- Record
SUSE-SU-2023:4558-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4559-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.2 (bsc#1217210):
- CVE-2023-41983: Processing web content may lead to a denial-of-service.
- CVE-2023-42852: Processing web content may lead to arbitrary code execution.
Already previously fixed:
- CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4).
- CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0).
- CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).
Bug fixes:
- Disable DMABuf renderer for NVIDIA proprietary drivers (bsc#1216778).
- Record
SUSE-SU-2023:4559-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4561-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.2 (bsc#1217210):
- CVE-2023-41983: Processing web content may lead to a denial-of-service.
- CVE-2023-42852: Processing web content may lead to arbitrary code execution.
Already previously fixed:
- CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4).
- CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0).
- CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).
- Record
SUSE-SU-2023:4561-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4651-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.2 (bsc#1217210):
- CVE-2023-41983: Processing web content may lead to a denial-of-service.
- CVE-2023-42852: Processing web content may lead to arbitrary code execution.
Already previously fixed:
- CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4).
- CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0).
- CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).
Bug fixes:
- Disable DMABuf renderer for NVIDIA proprietary drivers (bsc#1216778).
- Record
SUSE-SU-2023:4651-1- Updated
- 2026-11-02
OSVUSN-6490-1 No score
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.
- Record
USN-6490-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3AlmaLinux:9 From an advisory covering 10 CVEs |
before 2.42.5-1.el9 | 2.42.5-1.el9 |
webkit2gtk3-develAlmaLinux:9 From an advisory covering 10 CVEs |
before 2.42.5-1.el9 | 2.42.5-1.el9 |
webkit2gtk3-jscAlmaLinux:9 From an advisory covering 10 CVEs |
before 2.42.5-1.el9 | 2.42.5-1.el9 |
webkit2gtk3-jsc-develAlmaLinux:9 From an advisory covering 10 CVEs |
before 2.42.5-1.el9 | 2.42.5-1.el9 |
webkit2gtk3AlmaLinux:8 From an advisory covering 14 CVEs |
before 2.42.5-1.el8 | 2.42.5-1.el8 |
webkit2gtk3-develAlmaLinux:8 From an advisory covering 14 CVEs |
before 2.42.5-1.el8 | 2.42.5-1.el8 |
webkit2gtk3-jscAlmaLinux:8 From an advisory covering 14 CVEs |
before 2.42.5-1.el8 | 2.42.5-1.el8 |
webkit2gtk3-jsc-develAlmaLinux:8 From an advisory covering 14 CVEs |
before 2.42.5-1.el8 | 2.42.5-1.el8 |
webkit2gtkDebian:12 |
before 2.42.2-1~deb12u1, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 25 moreShow less2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-1~deb11u1 |
2.42.2-1~deb12u1 |
webkit2gtkDebian:13 |
before 2.42.2-1 | 2.42.2-1 |
Show 165 moreShow less
| Package | Affected | Fixed |
|---|---|---|
webkit2gtkDebian:14 |
before 2.42.2-1 | 2.42.2-1 |
wpewebkitDebian:12 |
All versions, plus listed versions 2.38.6-12.39.91-12.40.0-12.40.1-12.40.2-1 Show 45 moreShow less2.40.2-22.40.3-12.40.4-12.40.5-12.42.0-12.42.1-12.42.2-12.42.3-12.42.4-12.42.5-12.42.5-1.12.42.5-1.1~exp12.42.5-1.22.42.5-2~exp2.44.1-12.44.2-12.44.2-22.44.3-12.44.4-12.46.1-12.46.2-12.46.3-12.46.4-12.46.5-12.46.6-12.48.0-12.48.1-12.48.1-22.48.2-12.48.3-12.48.5-12.48.6-12.48.6-22.50.0-12.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-2 |
None known |
wpewebkitDebian:13 |
before 2.42.2-1 | 2.42.2-1 |
wpewebkitDebian:14 |
before 2.42.2-1 | 2.42.2-1 |
webkit2gtkDebian:11 From an advisory covering 2 CVEs |
before 2.42.2-1~deb11u1, plus listed versions 2.32.3-12.32.4-12.32.4-1~deb10u12.32.4-1~deb11u12.33.1-1 Show 45 moreShow less2.33.2-12.33.3-12.33.90-12.33.91-12.34.0-12.34.0-1~bpo11+12.34.1-12.34.1-1~deb10u12.34.1-1~deb11u12.34.2-12.34.2-1~bpo11+12.34.3-12.34.3-1~deb10u12.34.3-1~deb11u12.34.4-12.34.4-1~deb10u12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb10u12.34.6-1~deb11u12.35.1-12.35.2-12.35.3-12.35.90-12.36.0-12.36.0-22.36.0-32.36.0-3~deb10u12.36.0-3~deb11u12.36.1-12.36.2-12.36.3-12.36.3-1~deb10u12.36.3-1~deb11u12.36.4-12.36.4-1~deb10u12.36.4-1~deb11u12.36.6-12.36.6-1~deb10u12.36.6-1~deb11u12.36.7-12.36.7-1~deb10u12.36.7-1~deb11u12.37.1-1 |
2.42.2-1~deb11u1 |
webkit2gtkDebian:12 From an advisory covering 2 CVEs |
before 2.42.2-1~deb12u1, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 25 moreShow less2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-1~deb11u1 |
2.42.2-1~deb12u1 |
webkit2gtk3Red Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-develRed Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-jscRed Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 13 CVEs |
before 0:2.42.5-1.el9 | 0:2.42.5-1.el9 |
webkit2gtk3Red Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-develRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-jscRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3Red Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3-debugsourceRed Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3-develRed Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3-jscRed Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3-jsc-develRed Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 19 CVEs |
before 0:2.46.1-1.el9_2 | 0:2.46.1-1.el9_2 |
webkit2gtk3Red Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3-debuginfoRed Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3-debugsourceRed Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3-develRed Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3-jscRed Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3-jsc-develRed Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_e4s:9.0::appstream From an advisory covering 27 CVEs |
before 0:2.46.1-1.el9_0 | 0:2.46.1-1.el9_0 |
webkit2gtk3Red Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3-debugsourceRed Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3-develRed Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3-jscRed Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3-jsc-develRed Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 22 CVEs |
before 0:2.46.3-1.el8_8 | 0:2.46.3-1.el8_8 |
webkit2gtk3Red Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-debuginfoRed Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-debugsourceRed Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-develRed Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jscRed Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-develRed Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_aus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3Red Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-debuginfoRed Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-debugsourceRed Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-develRed Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jscRed Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-develRed Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_e4s:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3Red Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-debuginfoRed Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-debugsourceRed Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-develRed Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jscRed Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-develRed Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_tus:8.6::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_6 | 0:2.46.3-1.el8_6 |
webkit2gtk3Red Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-debugsourceRed Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-develRed Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jscRed Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-develRed Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3Red Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-debugsourceRed Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-develRed Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jscRed Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-develRed Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3Red Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-debugsourceRed Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-develRed Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jscRed Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-develRed Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_4 | 0:2.46.3-1.el8_4 |
webkit2gtk3Red Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkit2gtk3-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkit2gtk3-debugsourceRed Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkit2gtk3-develRed Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkit2gtk3-devel-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkit2gtk3-jscRed Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkit2gtk3-jsc-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkit2gtk3-jsc-develRed Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 30 CVEs |
before 0:2.46.3-1.el8_2 | 0:2.46.3-1.el8_2 |
webkitgtk4Red Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-debuginfoRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-develRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-jscRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-jsc-develRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-docRed Hat:rhel_els:7 From an advisory covering 230 CVEs |
before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkit2gtk3Rocky Linux:8 From an advisory covering 10 CVEs |
before 0:2.42.5-1.el8 | 0:2.42.5-1.el8 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 7 CVEs |
before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 7 CVEs |
before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 7 CVEs |
before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 7 CVEs |
before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 7 CVEs |
before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 7 CVEs |
before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 7 CVEs |
before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Enterprise Storage 7.1 From an advisory covering 7 CVEs |
before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 7 CVEs |
before 2.42.2-150000.3.157.1 | 2.42.2-150000.3.157.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 7 CVEs |
before 2.42.2-150000.3.157.1 | 2.42.2-150000.3.157.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 7 CVEs |
before 2.42.2-150000.3.157.1 | 2.42.2-150000.3.157.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP4 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3openSUSE:Leap 15.4 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3-soup2openSUSE:Leap 15.4 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk4openSUSE:Leap 15.4 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3openSUSE:Leap 15.5 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3-soup2openSUSE:Leap 15.5 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk4openSUSE:Leap 15.5 From an advisory covering 7 CVEs |
before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 7 CVEs |
before 2.42.2-2.158.2 | 2.42.2-2.158.2 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 7 CVEs |
before 2.42.2-2.158.2 | 2.42.2-2.158.2 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 7 CVEs |
before 2.42.2-2.158.2 | 2.42.2-2.158.2 |
webkit2gtk3SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 7 CVEs |
before 2.42.2-2.158.2 | 2.42.2-2.158.2 |
qtwebkit-opensource-srcUbuntu:16.04:LTS |
All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 |
None known |
webkit2gtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1 Show 21 moreShow less2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1 |
None known |
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
webkitgtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 |
None known |
webkit2gtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 33 moreShow less2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.12.24.4-0ubuntu0.18.04.12.26.1-0ubuntu0.18.04.12.26.2-0ubuntu0.18.04.12.26.3-0ubuntu0.18.04.12.26.4-0ubuntu0.18.04.12.28.0-0ubuntu0.18.04.32.28.1-0ubuntu0.18.04.12.28.2-0ubuntu0.18.04.12.28.3-0ubuntu0.18.04.12.28.4-0ubuntu0.18.04.12.30.3-0ubuntu0.18.04.12.30.5-0ubuntu0.18.04.12.30.6-0ubuntu0.18.04.12.32.0-0ubuntu0.18.04.12.32.3-0ubuntu0.18.04.12.32.4-0ubuntu0.18.04.1 |
None known |
qtwebkit-opensource-srcUbuntu:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1 |
None known |
qtwebkit-sourceUbuntu:18.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu13 |
None known |
webkitgtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3 |
None known |
webkit2gtkUbuntu:20.04:LTS |
All versions, plus listed versions 2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2 Show 26 moreShow less2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.12.36.4-0ubuntu0.20.04.12.36.6-0ubuntu0.20.04.12.36.7-0ubuntu0.20.04.12.36.8-0ubuntu0.20.04.12.38.2-0ubuntu0.20.04.12.38.3-0ubuntu0.20.04.12.38.4-0ubuntu0.20.04.22.38.5-0ubuntu0.20.04.12.38.6-0ubuntu0.20.04.1 |
None known |
qtwebkit-opensource-srcUbuntu:20.04:LTS |
All versions, plus listed versions 5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1 |
None known |
wpewebkitUbuntu:20.04:LTS |
All versions, plus listed versions 2.26.3-12.26.4-12.26.4-1build12.28.0-12.28.1-1 |
None known |
qtwebkit-opensource-srcUbuntu:22.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1 |
None known |
webkit2gtkUbuntu:22.04:LTS |
before 2.42.2-0ubuntu0.22.04.1, plus listed versions 2.34.0-1ubuntu12.34.1-1ubuntu12.34.2-1ubuntu12.34.3-12.35.3-1ubuntu1 Show 16 moreShow less2.35.90-1ubuntu12.36.0-2ubuntu12.36.2-0ubuntu0.22.04.12.36.3-0ubuntu0.22.04.12.36.4-0ubuntu0.22.04.12.36.6-0ubuntu0.22.04.12.36.7-0ubuntu0.22.04.12.36.8-0ubuntu0.22.04.12.38.2-0ubuntu0.22.04.22.38.3-0ubuntu0.22.04.12.38.4-0ubuntu0.22.04.12.38.5-0ubuntu0.22.04.12.38.6-0ubuntu0.22.04.12.40.4-0ubuntu0.22.04.12.40.5-0ubuntu0.22.04.12.42.1-0ubuntu0.22.04.1 |
2.42.2-0ubuntu0.22.04.1 |
wpewebkitUbuntu:22.04:LTS |
All versions, plus listed versions 2.32.4-12.34.1-12.34.2-12.34.3-12.34.4-1 Show 4 moreShow less2.34.5-12.34.6-12.36.0-2ubuntu22.36.0-2ubuntu3 |
None known |
qtwebkit-opensource-srcUbuntu:24.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36 |
None known |
webkit2gtkUbuntu:24.04:LTS |
before 2.42.2-1, plus listed versions 2.42.1-2 |
2.42.2-1 |
webkit2gtkUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 2.42.2-0ubuntu0.22.04.1, plus listed versions 2.34.0-1ubuntu12.34.1-1ubuntu12.34.2-1ubuntu12.34.3-12.35.3-1ubuntu1 Show 16 moreShow less2.35.90-1ubuntu12.36.0-2ubuntu12.36.2-0ubuntu0.22.04.12.36.3-0ubuntu0.22.04.12.36.4-0ubuntu0.22.04.12.36.6-0ubuntu0.22.04.12.36.7-0ubuntu0.22.04.12.36.8-0ubuntu0.22.04.12.38.2-0ubuntu0.22.04.22.38.3-0ubuntu0.22.04.12.38.4-0ubuntu0.22.04.12.38.5-0ubuntu0.22.04.12.38.6-0ubuntu0.22.04.12.40.4-0ubuntu0.22.04.12.40.5-0ubuntu0.22.04.12.42.1-0ubuntu0.22.04.1 |
2.42.2-0ubuntu0.22.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-42852 is a high vulnerability (CVSS 8.8) in Apple Ipados, published October 25, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.98%, the 80th percentile. Fixed in webkit2gtk 2.42.2-1~deb12u1.
References
support.apple.com/en-us/HT213981
support.apple.com/en-us/HT213986
support.apple.com/en-us/HT213987
support.apple.com/en-us/HT213984
support.apple.com/en-us/HT213988
support.apple.com/en-us/HT213982
Show 194 moreShow less
support.apple.com/kb/HT213984
seclists.org/fulldisclosure/2023/Oct/23
seclists.org/fulldisclosure/2023/Oct/22
seclists.org/fulldisclosure/2023/Oct/19
seclists.org/fulldisclosure/2023/Oct/27
seclists.org/fulldisclosure/2023/Oct/24
seclists.org/fulldisclosure/2023/Oct/25
lists.fedoraproject.org/archives/list/[email protected]/message/ZTCZGQPRDAOPP6NK4CIDJKIPMBWD5J7K
openwall.com/lists/oss-security/2023/11/15/1
debian.org/security/2023/dsa-5557
lists.fedoraproject.org/archives/list/[email protected]/message/RPPMOWFYZODONTA3RLZOKSGNR4DELGG2
lists.fedoraproject.org/archives/list/[email protected]/message/S3O7ITSBZDHLBM5OG22K6RZAHRRTGECM
security.gentoo.org/glsa/202401-33
nvd.nist.gov/vuln/detail/CVE-2023-42852
github.com/advisories/GHSA-jmh8-4h3g-x5g5
access.redhat.com/errata/RHSA-2024:2126
access.redhat.com/security/cve/CVE-2014-1745
access.redhat.com/security/cve/CVE-2023-32359
access.redhat.com/security/cve/CVE-2023-39928
access.redhat.com/security/cve/CVE-2023-40414
access.redhat.com/security/cve/CVE-2023-41983
access.redhat.com/security/cve/CVE-2023-42852
access.redhat.com/security/cve/CVE-2023-42883
access.redhat.com/security/cve/CVE-2023-42890
access.redhat.com/security/cve/CVE-2024-23206
access.redhat.com/security/cve/CVE-2024-23213
bugzilla.redhat.com/2241400
bugzilla.redhat.com/2254326
bugzilla.redhat.com/2254327
bugzilla.redhat.com/2269743
bugzilla.redhat.com/2270141
bugzilla.redhat.com/2270143
bugzilla.redhat.com/2270151
bugzilla.redhat.com/2271449
bugzilla.redhat.com/2271453
bugzilla.redhat.com/2271456
errata.almalinux.org/9/ALSA-2024-2126.html
access.redhat.com/errata/RHSA-2024:2982
bugzilla.redhat.com/2253058
errata.almalinux.org/8/ALSA-2024-2982.html
redhat.com/security/data/cve/CVE-2023-42875.html
redhat.com/security/data/cve/CVE-2023-42917.html
redhat.com/security/data/cve/CVE-2023-42970.html
redhat.com/security/data/cve/CVE-2023-43000.html
security-tracker.debian.org/tracker/CVE-2023-42852
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.4_release_notes/index
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2241400
bugzilla.redhat.com/show_bug.cgi?id=2253058
bugzilla.redhat.com/show_bug.cgi?id=2254326
bugzilla.redhat.com/show_bug.cgi?id=2254327
bugzilla.redhat.com/show_bug.cgi?id=2270143
bugzilla.redhat.com/show_bug.cgi?id=2270151
bugzilla.redhat.com/show_bug.cgi?id=2271449
bugzilla.redhat.com/show_bug.cgi?id=2271453
bugzilla.redhat.com/show_bug.cgi?id=2271456
bugzilla.redhat.com/show_bug.cgi?id=2314696
issues.redhat.com/browse/RHEL-3960
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2126.json
cve.org/CVERecord?id=CVE-2014-1745
nvd.nist.gov/vuln/detail/CVE-2014-1745
webkitgtk.org/security/WSA-2024-0001.html
cve.org/CVERecord?id=CVE-2023-32359
nvd.nist.gov/vuln/detail/CVE-2023-32359
webkitgtk.org/security/WSA-2023-0010.html
cve.org/CVERecord?id=CVE-2023-39928
nvd.nist.gov/vuln/detail/CVE-2023-39928
webkitgtk.org/security/WSA-2023-0009.html
cve.org/CVERecord?id=CVE-2023-40414
nvd.nist.gov/vuln/detail/CVE-2023-40414
cve.org/CVERecord?id=CVE-2023-41983
nvd.nist.gov/vuln/detail/CVE-2023-41983
cve.org/CVERecord?id=CVE-2023-42852
access.redhat.com/security/cve/CVE-2023-42875
bugzilla.redhat.com/show_bug.cgi?id=2366497
cve.org/CVERecord?id=CVE-2023-42875
nvd.nist.gov/vuln/detail/CVE-2023-42875
webkitgtk.org/security/WSA-2025-0004.html
cve.org/CVERecord?id=CVE-2023-42883
nvd.nist.gov/vuln/detail/CVE-2023-42883
cve.org/CVERecord?id=CVE-2023-42890
nvd.nist.gov/vuln/detail/CVE-2023-42890
access.redhat.com/security/cve/CVE-2023-42917
cve.org/CVERecord?id=CVE-2023-42917
nvd.nist.gov/vuln/detail/CVE-2023-42917
webkitgtk.org/security/WSA-2023-0011.html
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2023-42970
bugzilla.redhat.com/show_bug.cgi?id=2366498
cve.org/CVERecord?id=CVE-2023-42970
nvd.nist.gov/vuln/detail/CVE-2023-42970
access.redhat.com/security/cve/CVE-2023-43000
bugzilla.redhat.com/show_bug.cgi?id=2416324
cve.org/CVERecord?id=CVE-2023-43000
nvd.nist.gov/vuln/detail/CVE-2023-43000
webkitgtk.org/security/WSA-2025-0008.html
access.redhat.com/security/cve/CVE-2024-23271
cve.org/CVERecord?id=CVE-2024-23271
nvd.nist.gov/vuln/detail/CVE-2024-23271
webkitgtk.org/security/WSA-2024-0005.html
docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.10_release_notes/index
issues.redhat.com/browse/RHEL-3961
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2982.json
access.redhat.com/errata/RHSA-2024:8492
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8492.json
access.redhat.com/security/cve/CVE-2022-32885
cve.org/CVERecord?id=CVE-2022-32885
nvd.nist.gov/vuln/detail/CVE-2022-32885
webkitgtk.org/security/WSA-2023-0003.html
access.redhat.com/security/cve/CVE-2023-40397
cve.org/CVERecord?id=CVE-2023-40397
nvd.nist.gov/vuln/detail/CVE-2023-40397
wpewebkit.org/security/WSA-2023-0008.html
access.redhat.com/security/cve/CVE-2023-43010
cve.org/CVERecord?id=CVE-2023-43010
nvd.nist.gov/vuln/detail/CVE-2023-43010
webkitgtk.org/security/WSA-2026-0001.html
access.redhat.com/security/cve/CVE-2024-4558
cve.org/CVERecord?id=CVE-2024-4558
nvd.nist.gov/vuln/detail/CVE-2024-4558
access.redhat.com/security/cve/CVE-2024-27820
cve.org/CVERecord?id=CVE-2024-27820
nvd.nist.gov/vuln/detail/CVE-2024-27820
cve.org/CVERecord?id=CVE-2024-27851
nvd.nist.gov/vuln/detail/CVE-2024-27851
cve.org/CVERecord?id=CVE-2024-27856
nvd.nist.gov/vuln/detail/CVE-2024-27856
support.apple.com/en-us/120896
support.apple.com/en-us/120898
support.apple.com/en-us/120901
support.apple.com/en-us/120902
support.apple.com/en-us/120903
support.apple.com/en-us/120905
support.apple.com/en-us/120906
webkitgtk.org/security/WSA-2025-0001.html
cve.org/CVERecord?id=CVE-2024-40776
nvd.nist.gov/vuln/detail/CVE-2024-40776
webkitgtk.org/security/WSA-2024-0004.html
cve.org/CVERecord?id=CVE-2024-40779
nvd.nist.gov/vuln/detail/CVE-2024-40779
cve.org/CVERecord?id=CVE-2024-40780
nvd.nist.gov/vuln/detail/CVE-2024-40780
cve.org/CVERecord?id=CVE-2024-40782
nvd.nist.gov/vuln/detail/CVE-2024-40782
support.apple.com/en-us/121837
support.apple.com/en-us/121839
support.apple.com/en-us/121843
support.apple.com/en-us/121844
support.apple.com/en-us/121845
support.apple.com/en-us/121846
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8496.json
webkitgtk.org/security/WSA-2025-0003.html
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9646.json
webkitgtk.org/security/WSA-2024-0006.html
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9653.json
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9679.json
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9680.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10364.json
webkitgtk.org/security/WSA-2020-0006.html
webkitgtk.org/security/WSA-2020-0007.html
webkitgtk.org/security/WSA-2021-0002.html
webkitgtk.org/security/WSA-2020-0009.html
webkitgtk.org/security/WSA-2021-0001.html
webkitgtk.org/security/WSA-2021-0003.html
webkitgtk.org/security/WSA-2021-0004.html
talosintelligence.com/vulnerability_reports/TALOS-2020-1214
webkitgtk.org/security/WSA-2021-0006.html
webkitgtk.org/security/WSA-2022-0001.html
webkitgtk.org/security/WSA-2022-0002.html
wpewebkit.org/security/WSA-2022-0007.html
bugs.webkit.org/show_bug.cgi?id=242683
github.com/advisories/GHSA-6qjh-p74q-89mv
seclists.org/fulldisclosure/2024/Mar/21
support.apple.com/en-us/121238
support.apple.com/en-us/121241
support.apple.com/en-us/121838
support.apple.com/en-us/122066
errata.rockylinux.org/RLSA-2024:2982
suse.com/support/update/announcement/2023/suse-su-20234558-1
bugzilla.suse.com/1216778
bugzilla.suse.com/1217210
suse.com/security/cve/CVE-2022-32919
suse.com/security/cve/CVE-2022-32933
suse.com/security/cve/CVE-2022-46705
suse.com/security/cve/CVE-2022-46725
suse.com/security/cve/CVE-2023-32359
suse.com/security/cve/CVE-2023-41983
suse.com/security/cve/CVE-2023-42852
suse.com/support/update/announcement/2023/suse-su-20234559-1
suse.com/support/update/announcement/2023/suse-su-20234561-1
suse.com/support/update/announcement/2023/suse-su-20234651-1
ubuntu.com/security/CVE-2023-42852
ubuntu.com/security/notices/USN-6490-1
ubuntu.com/security/CVE-2023-41983
Left out here: 72 versions and 873 references. The JSON record has them.