CVE-2024-40794
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma...
This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
5.3
This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.
- Record
CVE-2024-40794- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List
5.3
This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.
- Record
CVE-2024-40794- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
EUVDEUVD-2024-38635
5.3
This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.
- Record
EUVD-2024-38635- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vcmx-3577-7jh3
5.3
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma...
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, Safari 17.6. Private Browsing tabs may be accessed without authentication.
- Record
GHSA-vcmx-3577-7jh3- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
OSV
5.3
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, Safari 17.6. Private Browsing tabs may be accessed without authentication.
- Record
CVE-2024-40794- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-40794
5.3
This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.
- Record
DEBIAN-CVE-2024-40794- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2024-40794
5.3
This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.
- Record
UBUNTU-CVE-2024-40794- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2024:3005-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):
- Fix web process cache suspend/resume when sandbox is enabled.
- Fix accelerated images dissapearing after scrolling.
- Fix video flickering with DMA-BUF sink.
- Fix pointer lock on X11.
- Fix movement delta on mouse events in GTK3.
- Undeprecate console message API and make it available in 2022 API.
- Fix several crashes and rendering issues.
- Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2023-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
- Record
SUSE-SU-2024:3005-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3052-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):
- Fix web process cache suspend/resume when sandbox is enabled.
- Fix accelerated images dissapearing after scrolling.
- Fix video flickering with DMA-BUF sink.
- Fix pointer lock on X11.
- Fix movement delta on mouse events in GTK3.
- Undeprecate console message API and make it available in 2022 API.
- Fix several crashes and rendering issues.
- Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
- Record
SUSE-SU-2024:3052-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3091-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):
- Fix web process cache suspend/resume when sandbox is enabled.
- Fix accelerated images dissapearing after scrolling.
- Fix video flickering with DMA-BUF sink.
- Fix pointer lock on X11.
- Fix movement delta on mouse events in GTK3.
- Undeprecate console message API and make it available in 2022 API.
- Fix several crashes and rendering issues.
- Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
- Record
SUSE-SU-2024:3091-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3109-1 No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):
- Fix web process cache suspend/resume when sandbox is enabled.
- Fix accelerated images dissapearing after scrolling.
- Fix video flickering with DMA-BUF sink.
- Fix pointer lock on X11.
- Fix movement delta on mouse events in GTK3.
- Undeprecate console message API and make it available in 2022 API.
- Fix several crashes and rendering issues.
- Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
- Record
SUSE-SU-2024:3109-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtkDebian:12 |
before 2.44.3-1~deb12u1, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 45 moreShow less2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1 |
2.44.3-1~deb12u1 |
webkit2gtkDebian:13 |
before 2.44.3-1 | 2.44.3-1 |
webkit2gtkDebian:14 |
before 2.44.3-1 | 2.44.3-1 |
wpewebkitDebian:12 |
All versions, plus listed versions 2.38.6-12.39.91-12.40.0-12.40.1-12.40.2-1 Show 45 moreShow less2.40.2-22.40.3-12.40.4-12.40.5-12.42.0-12.42.1-12.42.2-12.42.3-12.42.4-12.42.5-12.42.5-1.12.42.5-1.1~exp12.42.5-1.22.42.5-2~exp2.44.1-12.44.2-12.44.2-22.44.3-12.44.4-12.46.1-12.46.2-12.46.3-12.46.4-12.46.5-12.46.6-12.48.0-12.48.1-12.48.1-22.48.2-12.48.3-12.48.5-12.48.6-12.48.6-22.50.0-12.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-2 |
None known |
wpewebkitDebian:13 |
before 2.44.3-1 | 2.44.3-1 |
wpewebkitDebian:14 |
before 2.44.3-1 | 2.44.3-1 |
webkit2gtkDebian:11 From an advisory covering 8 CVEs |
before 2.44.3-1~deb11u1, plus listed versions 2.32.3-12.32.4-12.32.4-1~deb10u12.32.4-1~deb11u12.33.1-1 Show 45 moreShow less2.33.2-12.33.3-12.33.90-12.33.91-12.34.0-12.34.0-1~bpo11+12.34.1-12.34.1-1~deb10u12.34.1-1~deb11u12.34.2-12.34.2-1~bpo11+12.34.3-12.34.3-1~deb10u12.34.3-1~deb11u12.34.4-12.34.4-1~deb10u12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb10u12.34.6-1~deb11u12.35.1-12.35.2-12.35.3-12.35.90-12.36.0-12.36.0-22.36.0-32.36.0-3~deb10u12.36.0-3~deb11u12.36.1-12.36.2-12.36.3-12.36.3-1~deb10u12.36.3-1~deb11u12.36.4-12.36.4-1~deb10u12.36.4-1~deb11u12.36.6-12.36.6-1~deb10u12.36.6-1~deb11u12.36.7-12.36.7-1~deb10u12.36.7-1~deb11u12.37.1-1 |
2.44.3-1~deb11u1 |
webkit2gtkDebian:12 From an advisory covering 10 CVEs |
before 2.44.3-1~deb12u1, plus listed versions 2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1 Show 45 moreShow less2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1 |
2.44.3-1~deb12u1 |
webkit2gtk3SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 8 CVEs |
before 2.44.3-4.12.1 | 2.44.3-4.12.1 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 8 CVEs |
before 2.44.3-4.12.1 | 2.44.3-4.12.1 |
Show 50 moreShow less
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 8 CVEs |
before 2.44.3-4.12.1 | 2.44.3-4.12.1 |
webkit2gtk3SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 8 CVEs |
before 2.44.3-4.12.1 | 2.44.3-4.12.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3SUSE:Enterprise Storage 7.1 From an advisory covering 8 CVEs |
before 2.44.3-150200.118.1 | 2.44.3-150200.118.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Manager Proxy 4.3 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Manager Server 4.3 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3openSUSE:Leap 15.5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2openSUSE:Leap 15.5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk4openSUSE:Leap 15.5 From an advisory covering 8 CVEs |
before 2.44.3-150400.4.88.1 | 2.44.3-150400.4.88.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk4SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk3openSUSE:Leap 15.6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk3-soup2openSUSE:Leap 15.6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
webkit2gtk4openSUSE:Leap 15.6 From an advisory covering 8 CVEs |
before 2.44.3-150600.12.9.1 | 2.44.3-150600.12.9.1 |
qtwebkit-opensource-srcUbuntu:16.04:LTS |
All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 |
None known |
webkit2gtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1 Show 21 moreShow less2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1 |
None known |
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
webkitgtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 |
None known |
webkit2gtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 33 moreShow less2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.12.24.4-0ubuntu0.18.04.12.26.1-0ubuntu0.18.04.12.26.2-0ubuntu0.18.04.12.26.3-0ubuntu0.18.04.12.26.4-0ubuntu0.18.04.12.28.0-0ubuntu0.18.04.32.28.1-0ubuntu0.18.04.12.28.2-0ubuntu0.18.04.12.28.3-0ubuntu0.18.04.12.28.4-0ubuntu0.18.04.12.30.3-0ubuntu0.18.04.12.30.5-0ubuntu0.18.04.12.30.6-0ubuntu0.18.04.12.32.0-0ubuntu0.18.04.12.32.3-0ubuntu0.18.04.12.32.4-0ubuntu0.18.04.1 |
None known |
qtwebkit-opensource-srcUbuntu:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1 |
None known |
qtwebkit-sourceUbuntu:18.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu13 |
None known |
webkitgtkUbuntu:18.04:LTS |
All versions, plus listed versions 2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3 |
None known |
webkit2gtkUbuntu:20.04:LTS |
All versions, plus listed versions 2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2 Show 26 moreShow less2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.12.36.4-0ubuntu0.20.04.12.36.6-0ubuntu0.20.04.12.36.7-0ubuntu0.20.04.12.36.8-0ubuntu0.20.04.12.38.2-0ubuntu0.20.04.12.38.3-0ubuntu0.20.04.12.38.4-0ubuntu0.20.04.22.38.5-0ubuntu0.20.04.12.38.6-0ubuntu0.20.04.1 |
None known |
qtwebkit-opensource-srcUbuntu:20.04:LTS |
All versions, plus listed versions 5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1 |
None known |
wpewebkitUbuntu:20.04:LTS |
All versions, plus listed versions 2.26.3-12.26.4-12.26.4-1build12.28.0-12.28.1-1 |
None known |
qtwebkit-opensource-srcUbuntu:22.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1 |
None known |
wpewebkitUbuntu:22.04:LTS |
All versions, plus listed versions 2.32.4-12.34.1-12.34.2-12.34.3-12.34.4-1 Show 4 moreShow less2.34.5-12.34.6-12.36.0-2ubuntu22.36.0-2ubuntu3 |
None known |
qtwebkit-opensource-srcUbuntu:24.04:LTS |
All versions, plus listed versions 5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-40794 is a medium vulnerability (CVSS 5.3) in Apple Ipados, published July 29, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. Fixed in webkit2gtk 2.44.3-1~deb12u1.
References
support.apple.com/en-us/120909
support.apple.com/en-us/120911
support.apple.com/en-us/120913
support.apple.com/en-us/HT214121
support.apple.com/en-us/HT214117
support.apple.com/en-us/HT214119
Show 33 moreShow less
seclists.org/fulldisclosure/2024/Jul/16
seclists.org/fulldisclosure/2024/Jul/15
seclists.org/fulldisclosure/2024/Jul/18
lists.debian.org/debian-lts-announce/2024/09/msg00006.html
support.apple.com/kb/HT214121
support.apple.com/kb/HT214119
support.apple.com/kb/HT214117
nvd.nist.gov/vuln/detail/CVE-2024-40794
github.com/advisories/GHSA-vcmx-3577-7jh3
security-tracker.debian.org/tracker/CVE-2024-40794
suse.com/support/update/announcement/2024/suse-su-20243005-1
bugzilla.suse.com/1228613
bugzilla.suse.com/1228693
bugzilla.suse.com/1228694
bugzilla.suse.com/1228695
bugzilla.suse.com/1228696
bugzilla.suse.com/1228697
bugzilla.suse.com/1228698
suse.com/security/cve/CVE-2023-40782
suse.com/security/cve/CVE-2024-40776
suse.com/security/cve/CVE-2024-40779
suse.com/security/cve/CVE-2024-40780
suse.com/security/cve/CVE-2024-40785
suse.com/security/cve/CVE-2024-40789
suse.com/security/cve/CVE-2024-40794
suse.com/security/cve/CVE-2024-4558
suse.com/support/update/announcement/2024/suse-su-20243052-1
suse.com/security/cve/CVE-2024-40782
suse.com/support/update/announcement/2024/suse-su-20243091-1
suse.com/support/update/announcement/2024/suse-su-20243109-1
ubuntu.com/security/CVE-2024-40794
cve.org/CVERecord?id=CVE-2024-40794
webkitgtk.org/security/WSA-2024-0004.html
Left out here: 110 versions. The JSON record has them.