Every CVE Search/ Get API key

CVE-2024-40794

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma...

5.3 MediumFix available

This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

1.18%Up 1.1 points since Jul 30, 2024
90%50%10%1%

What each source reports

NVD Score used 5.3

This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.

Record
CVE-2024-40794
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-287
Updated
2026-11-02
CVE List 5.3

This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.

Record
CVE-2024-40794
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-287
Updated
2026-11-02
EUVDEUVD-2024-38635 5.3

This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.

Record
EUVD-2024-38635
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-vcmx-3577-7jh3 5.3

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma...

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, Safari 17.6. Private Browsing tabs may be accessed without authentication.

Record
GHSA-vcmx-3577-7jh3
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-287
Updated
2026-11-02
OSV 5.3

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, Safari 17.6. Private Browsing tabs may be accessed without authentication.

Record
CVE-2024-40794
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2024-40794 5.3

This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.

Record
DEBIAN-CVE-2024-40794
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2024-40794 5.3

This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.

Record
UBUNTU-CVE-2024-40794
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVSUSE-SU-2024:3005-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):

  • Fix web process cache suspend/resume when sandbox is enabled.
  • Fix accelerated images dissapearing after scrolling.
  • Fix video flickering with DMA-BUF sink.
  • Fix pointer lock on X11.
  • Fix movement delta on mouse events in GTK3.
  • Undeprecate console message API and make it available in 2022 API.
  • Fix several crashes and rendering issues.
  • Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2023-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
Record
SUSE-SU-2024:3005-1
Updated
2026-11-02
OSVSUSE-SU-2024:3052-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):

  • Fix web process cache suspend/resume when sandbox is enabled.
  • Fix accelerated images dissapearing after scrolling.
  • Fix video flickering with DMA-BUF sink.
  • Fix pointer lock on X11.
  • Fix movement delta on mouse events in GTK3.
  • Undeprecate console message API and make it available in 2022 API.
  • Fix several crashes and rendering issues.
  • Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
Record
SUSE-SU-2024:3052-1
Updated
2026-11-02
OSVSUSE-SU-2024:3091-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):

  • Fix web process cache suspend/resume when sandbox is enabled.
  • Fix accelerated images dissapearing after scrolling.
  • Fix video flickering with DMA-BUF sink.
  • Fix pointer lock on X11.
  • Fix movement delta on mouse events in GTK3.
  • Undeprecate console message API and make it available in 2022 API.
  • Fix several crashes and rendering issues.
  • Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
Record
SUSE-SU-2024:3091-1
Updated
2026-11-02
OSVSUSE-SU-2024:3109-1 No score

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):

  • Fix web process cache suspend/resume when sandbox is enabled.
  • Fix accelerated images dissapearing after scrolling.
  • Fix video flickering with DMA-BUF sink.
  • Fix pointer lock on X11.
  • Fix movement delta on mouse events in GTK3.
  • Undeprecate console message API and make it available in 2022 API.
  • Fix several crashes and rendering issues.
  • Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.
Record
SUSE-SU-2024:3109-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
webkit2gtk
Debian:12
before 2.44.3-1~deb12u1, plus listed versions
2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1
Show 45 moreShow less
2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1
2.44.3-1~deb12u1
webkit2gtk
Debian:13
before 2.44.3-1
2.44.3-1
webkit2gtk
Debian:14
before 2.44.3-1
2.44.3-1
wpewebkit
Debian:12
All versions, plus listed versions
2.38.6-12.39.91-12.40.0-12.40.1-12.40.2-1
Show 45 moreShow less
2.40.2-22.40.3-12.40.4-12.40.5-12.42.0-12.42.1-12.42.2-12.42.3-12.42.4-12.42.5-12.42.5-1.12.42.5-1.1~exp12.42.5-1.22.42.5-2~exp2.44.1-12.44.2-12.44.2-22.44.3-12.44.4-12.46.1-12.46.2-12.46.3-12.46.4-12.46.5-12.46.6-12.48.0-12.48.1-12.48.1-22.48.2-12.48.3-12.48.5-12.48.6-12.48.6-22.50.0-12.50.0-22.50.1-12.50.2-12.50.3-12.50.4-12.50.5-12.50.6-12.52.0-12.52.1-12.52.2-12.52.2-2
None known
wpewebkit
Debian:13
before 2.44.3-1
2.44.3-1
wpewebkit
Debian:14
before 2.44.3-1
2.44.3-1
webkit2gtk
Debian:11
From an advisory covering 8 CVEs
before 2.44.3-1~deb11u1, plus listed versions
2.32.3-12.32.4-12.32.4-1~deb10u12.32.4-1~deb11u12.33.1-1
Show 45 moreShow less
2.33.2-12.33.3-12.33.90-12.33.91-12.34.0-12.34.0-1~bpo11+12.34.1-12.34.1-1~deb10u12.34.1-1~deb11u12.34.2-12.34.2-1~bpo11+12.34.3-12.34.3-1~deb10u12.34.3-1~deb11u12.34.4-12.34.4-1~deb10u12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb10u12.34.6-1~deb11u12.35.1-12.35.2-12.35.3-12.35.90-12.36.0-12.36.0-22.36.0-32.36.0-3~deb10u12.36.0-3~deb11u12.36.1-12.36.2-12.36.3-12.36.3-1~deb10u12.36.3-1~deb11u12.36.4-12.36.4-1~deb10u12.36.4-1~deb11u12.36.6-12.36.6-1~deb10u12.36.6-1~deb11u12.36.7-12.36.7-1~deb10u12.36.7-1~deb11u12.37.1-1
2.44.3-1~deb11u1
webkit2gtk
Debian:12
From an advisory covering 10 CVEs
before 2.44.3-1~deb12u1, plus listed versions
2.40.1-12.40.2-12.40.2-1~deb11u12.40.2-1~deb12u12.40.3-1
Show 45 moreShow less
2.40.3-22.40.3-2~deb11u12.40.3-2~deb11u22.40.3-2~deb12u12.40.3-2~deb12u22.40.4-12.40.5-12.40.5-1~deb11u12.40.5-1~deb12u12.41.4-12.41.5-12.41.6-12.41.90-12.41.91-12.41.91-22.41.92-12.42.0-12.42.0-1~bpo12+12.42.1-12.42.1-1~bpo12+12.42.1-1~deb11u12.42.1-1~deb11u22.42.1-1~deb12u12.42.1-22.42.2-12.42.2-1~deb11u12.42.2-1~deb12u12.42.3-12.42.3-1~deb11u12.42.3-1~deb12u12.42.4-12.42.4-1~deb11u12.42.4-1~deb12u12.42.5-12.42.5-1~deb11u12.42.5-1~deb12u12.42.5-22.43.1-12.43.2-12.43.3-12.43.4-12.43.4-22.44.0-12.44.0-22.44.1-1
2.44.3-1~deb12u1
webkit2gtk3
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 8 CVEs
before 2.44.3-4.12.1
2.44.3-4.12.1
webkit2gtk3
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
before 2.44.3-4.12.1
2.44.3-4.12.1
Show 50 moreShow less
Affected packages
PackageAffectedFixed
webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
before 2.44.3-4.12.1
2.44.3-4.12.1
webkit2gtk3
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 8 CVEs
before 2.44.3-4.12.1
2.44.3-4.12.1
webkit2gtk3
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150200.118.1
2.44.3-150200.118.1
webkit2gtk3
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150200.118.1
2.44.3-150200.118.1
webkit2gtk3
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150200.118.1
2.44.3-150200.118.1
webkit2gtk3
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150200.118.1
2.44.3-150200.118.1
webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 8 CVEs
before 2.44.3-150200.118.1
2.44.3-150200.118.1
webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 8 CVEs
before 2.44.3-150200.118.1
2.44.3-150200.118.1
webkit2gtk3
SUSE:Enterprise Storage 7.1
From an advisory covering 8 CVEs
before 2.44.3-150200.118.1
2.44.3-150200.118.1
webkit2gtk3-soup2
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk4
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3-soup2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk4
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3-soup2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk4
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3-soup2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk4
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3-soup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk4
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3-soup2
SUSE:Manager Proxy 4.3
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3-soup2
SUSE:Manager Server 4.3
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3
openSUSE:Leap 15.5
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3-soup2
openSUSE:Leap 15.5
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk4
openSUSE:Leap 15.5
From an advisory covering 8 CVEs
before 2.44.3-150400.4.88.1
2.44.3-150400.4.88.1
webkit2gtk3-soup2
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 8 CVEs
before 2.44.3-150600.12.9.1
2.44.3-150600.12.9.1
webkit2gtk4
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 8 CVEs
before 2.44.3-150600.12.9.1
2.44.3-150600.12.9.1
webkit2gtk3
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
From an advisory covering 8 CVEs
before 2.44.3-150600.12.9.1
2.44.3-150600.12.9.1
webkit2gtk4
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 8 CVEs
before 2.44.3-150600.12.9.1
2.44.3-150600.12.9.1
webkit2gtk3
openSUSE:Leap 15.6
From an advisory covering 8 CVEs
before 2.44.3-150600.12.9.1
2.44.3-150600.12.9.1
webkit2gtk3-soup2
openSUSE:Leap 15.6
From an advisory covering 8 CVEs
before 2.44.3-150600.12.9.1
2.44.3-150600.12.9.1
webkit2gtk4
openSUSE:Leap 15.6
From an advisory covering 8 CVEs
before 2.44.3-150600.12.9.1
2.44.3-150600.12.9.1
qtwebkit-opensource-src
Ubuntu:16.04:LTS
All versions, plus listed versions
5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1
None known
webkit2gtk
Ubuntu:16.04:LTS
All versions, plus listed versions
2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1
Show 21 moreShow less
2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1
None known
qtwebkit-source
Ubuntu:16.04:LTS
All versions, plus listed versions
2.3.2-0ubuntu102.3.2-0ubuntu11
None known
webkitgtk
Ubuntu:16.04:LTS
All versions, plus listed versions
2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1
None known
webkit2gtk
Ubuntu:18.04:LTS
All versions, plus listed versions
2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1
Show 33 moreShow less
2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.12.24.4-0ubuntu0.18.04.12.26.1-0ubuntu0.18.04.12.26.2-0ubuntu0.18.04.12.26.3-0ubuntu0.18.04.12.26.4-0ubuntu0.18.04.12.28.0-0ubuntu0.18.04.32.28.1-0ubuntu0.18.04.12.28.2-0ubuntu0.18.04.12.28.3-0ubuntu0.18.04.12.28.4-0ubuntu0.18.04.12.30.3-0ubuntu0.18.04.12.30.5-0ubuntu0.18.04.12.30.6-0ubuntu0.18.04.12.32.0-0ubuntu0.18.04.12.32.3-0ubuntu0.18.04.12.32.4-0ubuntu0.18.04.1
None known
qtwebkit-opensource-src
Ubuntu:18.04:LTS
All versions, plus listed versions
5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1
None known
qtwebkit-source
Ubuntu:18.04:LTS
All versions, plus listed versions
2.3.2-0ubuntu13
None known
webkitgtk
Ubuntu:18.04:LTS
All versions, plus listed versions
2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3
None known
webkit2gtk
Ubuntu:20.04:LTS
All versions, plus listed versions
2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2
Show 26 moreShow less
2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.12.36.4-0ubuntu0.20.04.12.36.6-0ubuntu0.20.04.12.36.7-0ubuntu0.20.04.12.36.8-0ubuntu0.20.04.12.38.2-0ubuntu0.20.04.12.38.3-0ubuntu0.20.04.12.38.4-0ubuntu0.20.04.22.38.5-0ubuntu0.20.04.12.38.6-0ubuntu0.20.04.1
None known
qtwebkit-opensource-src
Ubuntu:20.04:LTS
All versions, plus listed versions
5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1
None known
wpewebkit
Ubuntu:20.04:LTS
All versions, plus listed versions
2.26.3-12.26.4-12.26.4-1build12.28.0-12.28.1-1
None known
qtwebkit-opensource-src
Ubuntu:22.04:LTS
All versions, plus listed versions
5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1
None known
wpewebkit
Ubuntu:22.04:LTS
All versions, plus listed versions
2.32.4-12.34.1-12.34.2-12.34.3-12.34.4-1
Show 4 moreShow less
2.34.5-12.34.6-12.36.0-2ubuntu22.36.0-2ubuntu3
None known
qtwebkit-opensource-src
Ubuntu:24.04:LTS
All versions, plus listed versions
5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36
None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-40794 is a medium vulnerability (CVSS 5.3) in Apple Ipados, published July 29, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. Fixed in webkit2gtk 2.44.3-1~deb12u1.

References

Show 33 moreShow less
This page doesn't list everything

Left out here: 110 versions. The JSON record has them.

MoveEnter Open