{"id":"CVE-2023-39434","aliases":["ALSA-2023:6535","ALSA-2023:7055","DEBIAN-CVE-2023-39434","DSA-5468-1","EUVD-2023-43158","GHSA-84c6-x9x8-7q38","MGASA-2024-0148","SUSE-SU-2023:4209-1","SUSE-SU-2023:4211-1","SUSE-SU-2023:4294-1","SUSE-SU-2023:4339-1","UBUNTU-CVE-2023-39434"],"status":"published","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0165,"percentile":0.76715,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-08-05T00:00:00Z","modified":"2026-10-29T11:31:33Z","fixes":[{"ecosystem":"Debian:12","package":"webkit2gtk","fixed_in":["2.40.5-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.40.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.40.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wpewebkit","fixed_in":["2.40.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.40.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","fixed_in":["2.40.5-0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1.el9"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1.el9"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1.el9"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1.el9"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1.el8"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1.el8"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1.el8"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1.el8"}]}],"bundled":18},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1~deb11u1"}]}],"versions":["2.32.3-1","2.32.4-1","2.32.4-1~deb10u1","2.32.4-1~deb11u1","2.33.1-1","2.33.2-1","2.33.3-1","2.33.90-1","2.33.91-1","2.34.0-1","2.34.0-1~bpo11+1","2.34.1-1","2.34.1-1~deb10u1","2.34.1-1~deb11u1","2.34.2-1","2.34.2-1~bpo11+1","2.34.3-1","2.34.3-1~deb10u1","2.34.3-1~deb11u1","2.34.4-1","2.34.4-1~deb10u1","2.34.4-1~deb11u1","2.34.5-1","2.34.6-1","2.34.6-1~deb10u1","2.34.6-1~deb11u1","2.35.1-1","2.35.2-1","2.35.3-1","2.35.90-1","2.36.0-1","2.36.0-2","2.36.0-3","2.36.0-3~deb10u1","2.36.0-3~deb11u1","2.36.1-1","2.36.2-1","2.36.3-1","2.36.3-1~deb10u1","2.36.3-1~deb11u1","2.36.4-1","2.36.4-1~deb10u1","2.36.4-1~deb11u1","2.36.6-1","2.36.6-1~deb10u1","2.36.6-1~deb11u1","2.36.7-1","2.36.7-1~deb10u1","2.36.7-1~deb11u1","2.37.1-1","2.37.1-2","2.37.90-1","2.37.91-1","2.38.0-1","2.38.0-1~deb10u1","2.38.0-1~deb11u1","2.38.0-2","2.38.0-3","2.38.1-1","2.38.2-1","2.38.2-1~deb10u1","2.38.2-1~deb11u1","2.38.3-1","2.38.3-1~deb10u1","2.38.3-1~deb11u1","2.38.4-1","2.38.4-2","2.38.4-2~deb10u1","2.38.4-2~deb11u1","2.38.5-1","2.38.5-1+m68k","2.38.5-1~deb10u1","2.38.5-1~deb11u1","2.39.1-1","2.39.2-1","2.39.3-1","2.39.4-1","2.39.5-1","2.39.7-1","2.39.90-1","2.39.91-1","2.40.0-1","2.40.0-2","2.40.0-3","2.40.1-1","2.40.1-1~deb11u1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1"],"bundled":12},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1~deb11u1"],"bundled":12},{"source":"osv","ecosystem":"Mageia:9","package":"webkit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.1-1.mga9"}]}],"bundled":33},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-2.155.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-2.155.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-2.155.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-2.155.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150000.3.153.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150000.3.153.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150000.3.153.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.3"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.3"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.2"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.2"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.3"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.2"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.2"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150400.4.57.3"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.1-150200.87.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.5-0ubuntu0.22.04.1"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/HT213938","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT213940","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT213937","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/3","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/8","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/9","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/3","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202401-33","tags":["x_transferred","advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0009.html","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39434"},{"url":"https://github.com/advisories/GHSA-84c6-x9x8-7q38"},{"url":"https://access.redhat.com/errata/RHSA-2023:6535","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32885","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27932","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27954","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28198","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32370","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32393","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38133","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38572","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38592","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38594","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38595","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38597","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38599","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38600","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38611","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39434","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40397","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40451","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224608","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231015","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231017","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231018","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231019","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231020","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231021","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231022","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231028","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231043","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236842","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236843","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236844","tags":["report"]},{"url":"https://bugzilla.redhat.com/2238943","tags":["report"]},{"url":"https://bugzilla.redhat.com/2238944","tags":["report"]},{"url":"https://bugzilla.redhat.com/2238945","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241405","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241409","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6535.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7055","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-7055.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-39434","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0148.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32202","tags":["report"]},{"url":"https://webkitgtk.org/2024/04/09/webkitgtk2.44.1-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/03/16/webkitgtk2.44.0-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/02/02/webkitgtk2.43.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/02/05/webkitgtk2.42.5-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/21/webkitgtk2.43.3-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/15/webkitgtk2.42.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/05/webkitgtk2.42.3-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/11/17/webkitgtk2.43.1-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/11/10/webkitgtk2.42.2-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/09/15/webkitgtk2.42.0-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/09/08/webkitgtk2.41.92-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/19/webkitgtk2.41.91-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/10/webkitgtk2.41.90-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/01/webkitgtk2.40.5-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/07/21/webkitgtk2.40.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/07/04/webkitgtk2.41.6-released.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234209-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213379","tags":["report"]},{"url":"https://bugzilla.suse.com/1213581","tags":["report"]},{"url":"https://bugzilla.suse.com/1213905","tags":["report"]},{"url":"https://bugzilla.suse.com/1215072","tags":["report"]},{"url":"https://bugzilla.suse.com/1215661","tags":["report"]},{"url":"https://bugzilla.suse.com/1215866","tags":["report"]},{"url":"https://bugzilla.suse.com/1215867","tags":["report"]},{"url":"https://bugzilla.suse.com/1215868","tags":["report"]},{"url":"https://bugzilla.suse.com/1215869","tags":["report"]},{"url":"https://bugzilla.suse.com/1215870","tags":["report"]},{"url":"https://bugzilla.suse.com/1216483","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-35074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41993","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234211-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234294-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214093","tags":["report"]},{"url":"https://bugzilla.suse.com/1214640","tags":["report"]},{"url":"https://bugzilla.suse.com/1214835","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234339-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-39434","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/09/28/3","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39434","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-39434","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","status":"published","published":"2023-09-26T20:14:45.109Z","modified":"2025-05-02T17:46:48.633Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-43158","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","status":"published","published":"2023-09-26T20:14:45Z","modified":"2025-05-02T17:46:48Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:51:55.85045Z"}],"ghsa":[{"id":"GHSA-84c6-x9x8-7q38","title":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","status":"published","published":"2023-09-27T15:30:35Z","modified":"2025-05-02T18:32:30Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:02:06.423076Z"}],"nvd":[{"id":"CVE-2023-39434","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","status":"published","published":"2023-09-27T15:18:56.317Z","modified":"2026-06-17T06:12:19.477Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:08:31.699785Z"}],"osv":[{"id":"CVE-2023-39434","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","status":"published","published":"2023-09-27T15:18:56.317Z","modified":"2026-04-16T04:32:19.778126433Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:32.922049Z"},{"id":"DEBIAN-CVE-2023-39434","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","status":"published","published":"2023-09-27T15:18:56.317Z","modified":"2026-10-26T18:01:53.494374071Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"UBUNTU-CVE-2023-39434","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","status":"published","published":"2023-09-27T15:18:00Z","modified":"2026-04-22T14:10:05.280772Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"ALSA-2023:6535","title":"Important: webkit2gtk3 security and bug fix update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: arbitrary code execution (CVE-2023-32393)\n* webkitgtk: bypass Same Origin Policy (CVE-2023-38572)\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592)\n* webkitgtk: arbitrary code execution (CVE-2023-38594)\n* webkitgtk: arbitrary code execution (CVE-2023-38595)\n* webkitgtk: arbitrary code execution (CVE-2023-38597)\n* webkitgtk: arbitrary code execution (CVE-2023-38600)\n* webkitgtk: arbitrary code execution (CVE-2023-38611)\n* webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)\n* webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932)\n* webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954)\n* webkitgtk: use after free vulnerability (CVE-2023-28198)\n* webkitgtk: content security policy blacklist failure (CVE-2023-32370)\n* webkitgtk: disclose sensitive information (CVE-2023-38133)\n* webkitgtk: track sensitive user information (CVE-2023-38599)\n* webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434)\n* webkitgtk: arbitrary javascript code execution (CVE-2023-40397)\n* webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:33.923645951Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:7055","title":"Important: webkit2gtk3 security and bug fix update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: arbitrary code execution (CVE-2023-32393)\n* webkitgtk: bypass Same Origin Policy (CVE-2023-38572)\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592)\n* webkitgtk: arbitrary code execution (CVE-2023-38594)\n* webkitgtk: arbitrary code execution (CVE-2023-38595)\n* webkitgtk: arbitrary code execution (CVE-2023-38597)\n* webkitgtk: arbitrary code execution (CVE-2023-38600)\n* webkitgtk: arbitrary code execution (CVE-2023-38611)\n* webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)\n* webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932)\n* webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954)\n* webkitgtk: use after free vulnerability (CVE-2023-28198)\n* webkitgtk: content security policy blacklist failure (CVE-2023-32370)\n* webkitgtk: disclose sensitive information (CVE-2023-38133)\n* webkitgtk: track sensitive user information (CVE-2023-38599)\n* webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434)\n* webkitgtk: arbitrary javascript code execution (CVE-2023-40397)\n* webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:19.281483206Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"DSA-5468-1","title":"webkit2gtk - security update","status":"published","published":"2023-08-05T00:00:00Z","modified":"2026-03-09T02:10:25.10697Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0148","title":"Updated webkit2 packages fix security vulnerabilities","description":"Due to issues in our build system this package is very outdated, now\nthat the issues are fixed we are publishing the current upstream\nversion.\nLot of CVEs are fixed and a lot of changes were made by upstream, see\nthe links.\n","status":"published","published":"2024-04-26T06:47:12Z","modified":"2026-04-16T04:43:25.746626234Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"SUSE-SU-2023:4209-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\n- CVE-2023-41993: Fixed an issue where processing malicious web\n  content could have lead to arbitrary code execution (bsc#1215661).\n- CVE-2023-39928: Fixed a use-after-free that could be exploited to\n  execute arbitrary code when visiting a malicious webpage\n  (bsc#1215868).\n- CVE-2023-41074: Fixed an issue where processing malicious web\n  content could have lead to arbitrary code execution (bsc#1215870).\n\nNon-security fixes:\n\n- Fixed missing package dependencies (bsc#1215072).\n","status":"published","published":"2023-10-26T08:24:56Z","modified":"2026-02-04T04:18:10.134511Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4211-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\n- CVE-2023-41993: Fixed an issue where processing malicious web\n  content could have lead to arbitrary code execution (bsc#1215661).\n- CVE-2023-39928: Fixed a use-after-free that could be exploited to\n  execute arbitrary code when visiting a malicious webpage\n  (bsc#1215868).\n- CVE-2023-41074: Fixed an issue where processing malicious web\n  content could have lead to arbitrary code execution (bsc#1215870).\n\nNon-security fixes:\n\n- Fixed missing package dependencies (bsc#1215072).\n","status":"published","published":"2023-10-26T08:28:14Z","modified":"2026-02-04T03:48:48.728223Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4294-1","title":"Security update for webkit2gtk3","description":"\nThis update for webkit2gtk3 ships missing Lang packages to SUSE Linux Enterprise 15 SP4 and SP5.\n\nSecurity fixes:\n\n- CVE-2023-41993: Fixed an issue where processing malicious web\n  content could have lead to arbitrary code execution (bsc#1215661).\n- CVE-2023-39928: Fixed a use-after-free that could be exploited to\n  execute arbitrary code when visiting a malicious webpage\n  (bsc#1215868).\n- CVE-2023-41074: Fixed an issue where processing malicious web\n  content could have lead to arbitrary code execution (bsc#1215870).\n\nOther fixes:\n\n- Fixed missing package dependencies (bsc#1215072).\n","status":"published","published":"2023-10-31T08:25:41Z","modified":"2025-05-02T04:35:06.227588Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4339-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\n- CVE-2023-41993: Fixed an issue where processing malicious web\n  content could have lead to arbitrary code execution (bsc#1215661).\n- CVE-2023-39928: Fixed a use-after-free that could be exploited to\n  execute arbitrary code when visiting a malicious webpage\n  (bsc#1215868).\n- CVE-2023-41074: Fixed an issue where processing malicious web\n  content could have lead to arbitrary code execution (bsc#1215870).\n\nNon-security fixes:\n\n- Fixed missing package dependencies (bsc#1215072).\n\n","status":"published","published":"2023-11-02T09:28:57Z","modified":"2026-02-04T03:33:43.362246Z","updated_at":"2026-11-02T15:53:53.865042Z"}]}}