Skip to content

CVE-2024-27808

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, visionOS...

8.8 HighFix available

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.18%Up 1.1 points since Jun 11, 2024

What each source reports

NVD Score used 8.8

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.

Record: CVE-2024-27808
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-786
Updated: 2026-11-02

CVE List 7.5

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.

Record: CVE-2024-27808
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-786
Updated: 2026-11-02

EUVDEUVD-2024-25001 7.5

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.

Record: EUVD-2024-25001
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-pwf2-5r2p-9c9w 8.8

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, visionOS...

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to arbitrary code execution.

Record: GHSA-pwf2-5r2p-9c9w
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-786
Updated: 2026-11-02

OSV 8.8

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to arbitrary code execution.

Record: CVE-2024-27808
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-27808 8.8

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.

Record: DEBIAN-CVE-2024-27808
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 15 moreShow less

OSVRHSA-2023:4201 9.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2023:4201
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:4202 9.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2023:4202
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:8496 9.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2024:8496
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9638 8.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2024:9638
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9646 9.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2024:9646
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9653 9.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2024:9653
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9679 9.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2024:9679
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9680 9.8

Red Hat Security Advisory: webkit2gtk3 security update

Record: RHSA-2024:9680
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:10364 10.0

Red Hat Security Advisory: webkitgtk4 security update

Record: RHSA-2025:10364
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-27808 8.8

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.

Record: UBUNTU-CVE-2024-27808
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2025-0313 No score

Updated webkit2 packages fix security vulnerabilities

We are updating webkit2 to version 2.50.1 that has many security fixes since our current version. Please see the links for additional information

Record: MGASA-2025-0313
Updated: 2026-11-02

OSVSUSE-SU-2024:3751-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.46.0 (bsc#1231039).

CVE-2024-40866
CVE-2024-44187

Already fixed in version 2.44.3:

CVE-2024-4558
CVE-2024-27838
CVE-2024-27851

Already fixed in version 2.44.2:

CVE-2024-27834
CVE-2024-27808
CVE-2024-27820
CVE-2024-27833

Already fixed in version 2.44.1:

CVE-2024-23222
CVE-2024-23206
CVE-2024-23213
CVE-2024-23271

Record: SUSE-SU-2024:3751-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3752-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.46.0 (bsc#1231039).

CVE-2024-40866
CVE-2024-44187

Already fixed in version 2.44.3:

CVE-2024-27838
CVE-2024-27851

Already fixed in version 2.44.2:

CVE-2024-27834
CVE-2024-27808
CVE-2024-27820
CVE-2024-27833

Already fixed in version 2.44.1:

CVE-2024-23222
CVE-2024-23206
CVE-2024-23213
CVE-2024-23271

Record: SUSE-SU-2024:3752-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3869-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.46.0 (bsc#1231039).

CVE-2024-40866
CVE-2024-44187

Already fixed in version 2.44.3:

CVE-2024-4558
CVE-2024-27838
CVE-2024-27851

Already fixed in version 2.44.2:

CVE-2024-27834
CVE-2024-27808
CVE-2024-27820
CVE-2024-27833

Already fixed in version 2.44.1:

CVE-2024-23222
CVE-2024-23206
CVE-2024-23213
CVE-2024-23271

Record: SUSE-SU-2024:3869-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3870-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.46.0 (bsc#1231039).

CVE-2024-40866
CVE-2024-44187

Already fixed in version 2.44.3:

CVE-2024-4558
CVE-2024-27838
CVE-2024-27851

Already fixed in version 2.44.2:

CVE-2024-27834
CVE-2024-27808
CVE-2024-27820
CVE-2024-27833

Already fixed in version 2.44.1:

CVE-2024-23222
CVE-2024-23206
CVE-2024-23213
CVE-2024-23271

Record: SUSE-SU-2024:3870-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`webkit2gtk` Debian:12	before 2.44.2-1~deb12u1, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 45 moreShow less 2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1	2.44.2-1~deb12u1
`webkit2gtk` Debian:13	before 2.44.2-1	2.44.2-1
`webkit2gtk` Debian:14	before 2.44.2-1	2.44.2-1
`wpewebkit` Debian:12	All versions, plus listed versions 2.38.6-12.39.91-12.40.0-12.40.1-12.40.2-1 Show 45 moreShow less 2.40.2-22.40.3-12.40.4-12.40.5-12.42.0-12.42.1-12.42.2-12.42.3-12.42.4-12.42.5-12.42.5-1.12.42.5-1.1~exp12.42.5-1.22.42.5-2~exp2.44.1-12.44.2-12.44.2-22.44.3-12.44.4-12.46.1-12.46.2-12.46.3-12.46.4-12.46.5-12.46.6-12.48.0-12.48.1-12.48.1-22.48.2-12.48.3-12.48.5-12.48.6-12.48.6-22.50.0-12.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-2	None known
`wpewebkit` Debian:13	before 2.44.2-1	2.44.2-1
`wpewebkit` Debian:14	before 2.44.2-1	2.44.2-1
`webkit2gtk` Debian:11	before 2.44.2-1~deb11u1, plus listed versions 2.32.3-12.32.4-12.32.4-1~deb10u12.32.4-1~deb11u12.33.1-1 Show 45 moreShow less 2.33.2-12.33.3-12.33.90-12.33.91-12.34.0-12.34.0-1~bpo11+12.34.1-12.34.1-1~deb10u12.34.1-1~deb11u12.34.2-12.34.2-1~bpo11+12.34.3-12.34.3-1~deb10u12.34.3-1~deb11u12.34.4-12.34.4-1~deb10u12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb10u12.34.6-1~deb11u12.35.1-12.35.2-12.35.3-12.35.90-12.36.0-12.36.0-22.36.0-32.36.0-3~deb10u12.36.0-3~deb11u12.36.1-12.36.2-12.36.3-12.36.3-1~deb10u12.36.3-1~deb11u12.36.4-12.36.4-1~deb10u12.36.4-1~deb11u12.36.6-12.36.6-1~deb10u12.36.6-1~deb11u12.36.7-12.36.7-1~deb10u12.36.7-1~deb11u12.37.1-1	2.44.2-1~deb11u1
`webkit2` Mageia:9	before 2.50.1-1.2.mga9	2.50.1-1.2.mga9
`webkit2gtk3` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3
`webkit2gtk3-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3

Show 155 moreShow less

Affected packages
Package	Affected	Fixed
`webkit2gtk3-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3
`webkit2gtk3-devel` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3
`webkit2gtk3-devel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3
`webkit2gtk3-jsc` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3
`webkit2gtk3-jsc-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3
`webkit2gtk3-jsc-devel` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:2.38.5-1.el9_2.3	0:2.38.5-1.el9_2.3
`webkit2gtk3` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3-devel` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3-devel-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3-jsc` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3-jsc-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3-jsc-devel` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:2.38.5-1.el8_8.5	0:2.38.5-1.el8_8.5
`webkit2gtk3` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3-debuginfo` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3-debugsource` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3-devel` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3-jsc` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3-jsc-devel` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_e4s:9.0::appstream	before 0:2.46.1-1.el9_0	0:2.46.1-1.el9_0
`webkit2gtk3` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3-debuginfo` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3-debugsource` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3-devel` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3-jsc` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3-jsc-devel` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_eus:9.2::appstream	before 0:2.46.3-1.el9_2	0:2.46.3-1.el9_2
`webkit2gtk3` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3-debuginfo` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3-debugsource` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3-devel` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3-jsc` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3-jsc-devel` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_eus:8.8::appstream	before 0:2.46.3-1.el8_8	0:2.46.3-1.el8_8
`webkit2gtk3` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-debugsource` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-devel` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_aus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-debuginfo` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-debugsource` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-devel` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_e4s:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-debuginfo` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-debugsource` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-devel` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-devel` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_tus:8.6::appstream	before 0:2.46.3-1.el8_6	0:2.46.3-1.el8_6
`webkit2gtk3` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-debugsource` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-devel` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_aus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-debuginfo` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-debugsource` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-devel` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_e4s:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-debuginfo` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-debugsource` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-devel` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-devel` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_tus:8.4::appstream	before 0:2.46.3-1.el8_4	0:2.46.3-1.el8_4
`webkit2gtk3` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkit2gtk3-debuginfo` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkit2gtk3-debugsource` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkit2gtk3-devel` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkit2gtk3-devel-debuginfo` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkit2gtk3-jsc` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkit2gtk3-jsc-debuginfo` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkit2gtk3-jsc-devel` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkit2gtk3-jsc-devel-debuginfo` Red Hat:rhel_aus:8.2::appstream	before 0:2.46.3-1.el8_2	0:2.46.3-1.el8_2
`webkitgtk4` Red Hat:rhel_els:7	before 0:2.48.3-2.el7_9	0:2.48.3-2.el7_9
`webkitgtk4-debuginfo` Red Hat:rhel_els:7	before 0:2.48.3-2.el7_9	0:2.48.3-2.el7_9
`webkitgtk4-devel` Red Hat:rhel_els:7	before 0:2.48.3-2.el7_9	0:2.48.3-2.el7_9
`webkitgtk4-jsc` Red Hat:rhel_els:7	before 0:2.48.3-2.el7_9	0:2.48.3-2.el7_9
`webkitgtk4-jsc-devel` Red Hat:rhel_els:7	before 0:2.48.3-2.el7_9	0:2.48.3-2.el7_9
`webkitgtk4-doc` Red Hat:rhel_els:7	before 0:2.48.3-2.el7_9	0:2.48.3-2.el7_9
`webkit2gtk3` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 2.46.0-4.15.1	2.46.0-4.15.1
`webkit2gtk3` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 2.46.0-4.15.1	2.46.0-4.15.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 2.46.0-150600.12.12.1	2.46.0-150600.12.12.1
`webkit2gtk4` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 2.46.0-150600.12.12.1	2.46.0-150600.12.12.1
`webkit2gtk3` SUSE:Linux Enterprise Module for Desktop Applications 15 SP6	before 2.46.0-150600.12.12.1	2.46.0-150600.12.12.1
`webkit2gtk4` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 2.46.0-150600.12.12.1	2.46.0-150600.12.12.1
`webkit2gtk3` openSUSE:Leap 15.6	before 2.46.0-150600.12.12.1	2.46.0-150600.12.12.1
`webkit2gtk3-soup2` openSUSE:Leap 15.6	before 2.46.0-150600.12.12.1	2.46.0-150600.12.12.1
`webkit2gtk4` openSUSE:Leap 15.6	before 2.46.0-150600.12.12.1	2.46.0-150600.12.12.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Module for Basesystem 15 SP5	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3` SUSE:Linux Enterprise Module for Desktop Applications 15 SP5	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk4` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk4` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3-soup2` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk4` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 2.46.0-150400.4.91.1	2.46.0-150400.4.91.1
`webkit2gtk3` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 2.46.0-150200.121.1	2.46.0-150200.121.1
`webkit2gtk3` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 2.46.0-150200.121.1	2.46.0-150200.121.1
`webkit2gtk3` SUSE:Linux Enterprise Server 15 SP3-LTSS	before 2.46.0-150200.121.1	2.46.0-150200.121.1
`webkit2gtk3` SUSE:Linux Enterprise Server for SAP Applications 15 SP3	before 2.46.0-150200.121.1	2.46.0-150200.121.1
`qtwebkit-opensource-src` Ubuntu:16.04:LTS	All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1	None known
`webkit2gtk` Ubuntu:16.04:LTS	All versions, plus listed versions 2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1 Show 21 moreShow less 2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1	None known
`qtwebkit-source` Ubuntu:16.04:LTS	All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11	None known
`webkitgtk` Ubuntu:16.04:LTS	All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1	None known
`webkit2gtk` Ubuntu:18.04:LTS	All versions, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 33 moreShow less 2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.12.24.4-0ubuntu0.18.04.12.26.1-0ubuntu0.18.04.12.26.2-0ubuntu0.18.04.12.26.3-0ubuntu0.18.04.12.26.4-0ubuntu0.18.04.12.28.0-0ubuntu0.18.04.32.28.1-0ubuntu0.18.04.12.28.2-0ubuntu0.18.04.12.28.3-0ubuntu0.18.04.12.28.4-0ubuntu0.18.04.12.30.3-0ubuntu0.18.04.12.30.5-0ubuntu0.18.04.12.30.6-0ubuntu0.18.04.12.32.0-0ubuntu0.18.04.12.32.3-0ubuntu0.18.04.12.32.4-0ubuntu0.18.04.1	None known
`qtwebkit-opensource-src` Ubuntu:18.04:LTS	All versions, plus listed versions 5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1	None known
`qtwebkit-source` Ubuntu:18.04:LTS	All versions, plus listed versions 2.3.2-0ubuntu13	None known
`webkitgtk` Ubuntu:18.04:LTS	All versions, plus listed versions 2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3	None known
`webkit2gtk` Ubuntu:20.04:LTS	All versions, plus listed versions 2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2 Show 26 moreShow less 2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.12.36.4-0ubuntu0.20.04.12.36.6-0ubuntu0.20.04.12.36.7-0ubuntu0.20.04.12.36.8-0ubuntu0.20.04.12.38.2-0ubuntu0.20.04.12.38.3-0ubuntu0.20.04.12.38.4-0ubuntu0.20.04.22.38.5-0ubuntu0.20.04.12.38.6-0ubuntu0.20.04.1	None known
`qtwebkit-opensource-src` Ubuntu:20.04:LTS	All versions, plus listed versions 5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1	None known
`wpewebkit` Ubuntu:20.04:LTS	All versions, plus listed versions 2.26.3-12.26.4-12.26.4-1build12.28.0-12.28.1-1	None known
`qtwebkit-opensource-src` Ubuntu:22.04:LTS	All versions, plus listed versions 5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1	None known
`webkit2gtk` Ubuntu:22.04:LTS	before 2.44.2-0ubuntu0.22.04.1, plus listed versions 2.34.0-1ubuntu12.34.1-1ubuntu12.34.2-1ubuntu12.34.3-12.35.3-1ubuntu1 Show 21 moreShow less 2.35.90-1ubuntu12.36.0-2ubuntu12.36.2-0ubuntu0.22.04.12.36.3-0ubuntu0.22.04.12.36.4-0ubuntu0.22.04.12.36.6-0ubuntu0.22.04.12.36.7-0ubuntu0.22.04.12.36.8-0ubuntu0.22.04.12.38.2-0ubuntu0.22.04.22.38.3-0ubuntu0.22.04.12.38.4-0ubuntu0.22.04.12.38.5-0ubuntu0.22.04.12.38.6-0ubuntu0.22.04.12.40.4-0ubuntu0.22.04.12.40.5-0ubuntu0.22.04.12.42.1-0ubuntu0.22.04.12.42.2-0ubuntu0.22.04.12.42.3-0ubuntu0.22.04.12.42.4-0ubuntu0.22.04.12.42.5-0ubuntu0.22.04.22.44.0-0ubuntu0.22.04.1	2.44.2-0ubuntu0.22.04.1
`wpewebkit` Ubuntu:22.04:LTS	All versions, plus listed versions 2.32.4-12.34.1-12.34.2-12.34.3-12.34.4-1 Show 4 moreShow less 2.34.5-12.34.6-12.36.0-2ubuntu22.36.0-2ubuntu3	None known
`qtwebkit-opensource-src` Ubuntu:24.04:LTS	All versions, plus listed versions 5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36	None known
`webkit2gtk` Ubuntu:24.04:LTS	before 2.44.2-0ubuntu0.24.04.1, plus listed versions 2.42.1-22.42.2-12.42.3-12.42.4-12.43.3-12.43.3-1build22.44.0-2	2.44.2-0ubuntu0.24.04.1

History

History
Recorded	Changed	Sources
Nov 4, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-27808 is a high vulnerability (CVSS 8.8) in Apple Ipados, published May 22, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. Fixed in webkit2gtk 2.44.2-1~deb12u1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 98 versions and 856 references. The JSON record has them.