CVE-2024-40785
This issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7...
6.1 MediumFix available
This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
0.78%Up 0.7 points since Jul 30, 2024
What each source reports
NVD Score used
This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
- Record
CVE-2024-40785- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List
This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
- Record
CVE-2024-40785- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
EUVDEUVD-2024-38626
This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
- Record
EUVD-2024-38626- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6hq7-9r57-p64g
This issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7...
This issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
- Record
GHSA-6hq7-9r57-p64g- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSV
This issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
- Record
CVE-2024-40785- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-40785
This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
- Record
DEBIAN-CVE-2024-40785- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2024-40785
This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
- Record
UBUNTU-CVE-2024-40785- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2024:3005-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):
- Fix web process cache suspend/resume when sandbox is enabled.
- Fix accelerated images dissapearing after scrolling.
- Fix video flickering with DMA-BUF sink.
- Fix pointer lock on X11.
- Fix movement delta on mouse events in GTK3.
- Undeprecate console message API and make it available in 2022 API.
- Fix several crashes and rendering issues.
- Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2023-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
- Record
SUSE-SU-2024:3005-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3052-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):
- Fix web process cache suspend/resume when sandbox is enabled.
- Fix accelerated images dissapearing after scrolling.
- Fix video flickering with DMA-BUF sink.
- Fix pointer lock on X11.
- Fix movement delta on mouse events in GTK3.
- Undeprecate console message API and make it available in 2022 API.
- Fix several crashes and rendering issues.
- Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
- Record
SUSE-SU-2024:3052-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3091-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):
- Fix web process cache suspend/resume when sandbox is enabled.
- Fix accelerated images dissapearing after scrolling.
- Fix video flickering with DMA-BUF sink.
- Fix pointer lock on X11.
- Fix movement delta on mouse events in GTK3.
- Undeprecate console message API and make it available in 2022 API.
- Fix several crashes and rendering issues.
- Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
- Record
SUSE-SU-2024:3091-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3109-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):
- Fix web process cache suspend/resume when sandbox is enabled.
- Fix accelerated images dissapearing after scrolling.
- Fix video flickering with DMA-BUF sink.
- Fix pointer lock on X11.
- Fix movement delta on mouse events in GTK3.
- Undeprecate console message API and make it available in 2022 API.
- Fix several crashes and rendering issues.
- Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
- Record
SUSE-SU-2024:3109-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtkDebian:12 |
before 2.44.3-1~deb12u1, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 45 moreShow less2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1 |
2.44.3-1~deb12u1 |
webkit2gtkDebian:13 |
before 2.44.3-1 | 2.44.3-1 |
webkit2gtkDebian:14 |
before 2.44.3-1 | 2.44.3-1 |
wpewebkitDebian:12 |
All versions, plus listed versions 2.38.6-12.39.91-12.40.0-12.40.1-12.40.2-1 Show 45 moreShow less2.40.2-22.40.3-12.40.4-12.40.5-12.42.0-12.42.1-12.42.2-12.42.3-12.42.4-12.42.5-12.42.5-1.12.42.5-1.1~exp12.42.5-1.22.42.5-2~exp2.44.1-12.44.2-12.44.2-22.44.3-12.44.4-12.46.1-12.46.2-12.46.3-12.46.4-12.46.5-12.46.6-12.48.0-12.48.1-12.48.1-22.48.2-12.48.3-12.48.5-12.48.6-12.48.6-22.50.0-12.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-2 |
None known |
wpewebkitDebian:13 |
before 2.44.3-1 | 2.44.3-1 |
wpewebkitDebian:14 |
before 2.44.3-1 | 2.44.3-1 |
webkit2gtkDebian:11 From an advisory covering 8 CVEs |
before 2.44.3-1~deb11u1, plus listed versions 2.32.3-12.32.4-12.32.4-1~deb10u12.32.4-1~deb11u12.33.1-1 Show 45 moreShow less2.33.2-12.33.3-12.33.90-12.33.91-12.34.0-12.34.0-1~bpo11+12.34.1-12.34.1-1~deb10u12.34.1-1~deb11u12.34.2-12.34.2-1~bpo11+12.34.3-12.34.3-1~deb10u12.34.3-1~deb11u12.34.4-12.34.4-1~deb10u12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb10u12.34.6-1~deb11u12.35.1-12.35.2-12.35.3-12.35.90-12.36.0-12.36.0-22.36.0-32.36.0-3~deb10u12.36.0-3~deb11u12.36.1-12.36.2-12.36.3-12.36.3-1~deb10u12.36.3-1~deb11u12.36.4-12.36.4-1~deb10u12.36.4-1~deb11u12.36.6-12.36.6-1~deb10u12.36.6-1~deb11u12.36.7-12.36.7-1~deb10u12.36.7-1~deb11u12.37.1-1 |
2.44.3-1~deb11u1 |
webkit2gtkDebian:12 From an advisory covering 10 CVEs |
before 2.44.3-1~deb12u1, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 45 moreShow less2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1 |
2.44.3-1~deb12u1 |
webkit2gtk3SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 8 CVEs |
before 2.44.3-4.12.1 | 2.44.3-4.12.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 8 CVEs |
before 2.44.3-4.12.1 | 2.44.3-4.12.1 |
Show 50 moreShow less
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 8 CVEs |
before 2.44.3-4.12.1 | 2.44.3-4.12.1 |
webkit2gtk3SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 8 CVEs |
before 2.44.3-4.12.1 | 2.44.3-4.12.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Enterprise Storage 7.1 From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Manager Proxy 4.3 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Manager Server 4.3 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3openSUSE:Leap 15.5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2openSUSE:Leap 15.5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4openSUSE:Leap 15.5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk4SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk3openSUSE:Leap 15.6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk3-soup2openSUSE:Leap 15.6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk4openSUSE:Leap 15.6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
qtwebkit-opensource-srcUbuntu:16.04:LTS |
All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 |
None known |
webkit2gtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1 Show 21 moreShow less2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1 |
None known |
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
webkitgtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 |
None known |
webkit2gtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 33 moreShow less2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.12.24.4-0ubuntu0.18.04.12.26.1-0ubuntu0.18.04.12.26.2-0ubuntu0.18.04.12.26.3-0ubuntu0.18.04.12.26.4-0ubuntu0.18.04.12.28.0-0ubuntu0.18.04.32.28.1-0ubuntu0.18.04.12.28.2-0ubuntu0.18.04.12.28.3-0ubuntu0.18.04.12.28.4-0ubuntu0.18.04.12.30.3-0ubuntu0.18.04.12.30.5-0ubuntu0.18.04.12.30.6-0ubuntu0.18.04.12.32.0-0ubuntu0.18.04.12.32.3-0ubuntu0.18.04.12.32.4-0ubuntu0.18.04.1 |
None known |
qtwebkit-opensource-srcUbuntu:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1 |
None known |
qtwebkit-sourceUbuntu:18.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu13 |
None known |
webkitgtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3 |
None known |
webkit2gtkUbuntu:20.04:LTS |
All versions, plus listed versions 2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2 Show 26 moreShow less2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.12.36.4-0ubuntu0.20.04.12.36.6-0ubuntu0.20.04.12.36.7-0ubuntu0.20.04.12.36.8-0ubuntu0.20.04.12.38.2-0ubuntu0.20.04.12.38.3-0ubuntu0.20.04.12.38.4-0ubuntu0.20.04.22.38.5-0ubuntu0.20.04.12.38.6-0ubuntu0.20.04.1 |
None known |
qtwebkit-opensource-srcUbuntu:20.04:LTS |
All versions, plus listed versions 5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1 |
None known |
wpewebkitUbuntu:20.04:LTS |
All versions, plus listed versions 2.26.3-12.26.4-12.26.4-1build12.28.0-12.28.1-1 |
None known |
qtwebkit-opensource-srcUbuntu:22.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1 |
None known |
wpewebkitUbuntu:22.04:LTS |
All versions, plus listed versions 2.32.4-12.34.1-12.34.2-12.34.3-12.34.4-1 Show 4 moreShow less2.34.5-12.34.6-12.36.0-2ubuntu22.36.0-2ubuntu3 |
None known |
qtwebkit-opensource-srcUbuntu:24.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-40785 is a medium vulnerability (CVSS 6.1) in Apple Ipados, published July 29, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. Fixed in webkit2gtk 2.44.3-1~deb12u1.
References
support.apple.com/en-us/120908
Show 47 moreShow less
seclists.org/fulldisclosure/2024/Jul/16
lists.debian.org/debian-lts-announce/2024/09/msg00006.html
nvd.nist.gov/vuln/detail/CVE-2024-40785
github.com/advisories/GHSA-6hq7-9r57-p64g
security-tracker.debian.org/tracker/CVE-2024-40785
suse.com/support/update/announcement/2024/suse-su-20243005-1
bugzilla.suse.com/1228613
ubuntu.com/security/CVE-2024-40785
cve.org/CVERecord?id=CVE-2024-40785
webkitgtk.org/security/WSA-2024-0004.html
This page doesn't list everything
Left out here: 110 versions. The JSON record has them.