{"id":"CVE-2024-23206","aliases":["ALSA-2024:2126","ALSA-2024:2982","DEBIAN-CVE-2024-23206","DSA-5618-1","EUVD-2024-20725","GHSA-73m5-j333-fcwc","MGASA-2024-0148","RLSA-2024:2982","SUSE-SU-2024:0519-1","SUSE-SU-2024:0545-1","SUSE-SU-2024:0548-1","SUSE-SU-2024:3752-1","SUSE-SU-2024:3869-1","SUSE-SU-2024:3870-1","UBUNTU-CVE-2024-23206","USN-6631-1"],"status":"published","title":"An access issue was addressed with improved access restrictions. This issue is fixed in watchOS...","description":"An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00921,"percentile":0.60791,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2024-01-23T00:25:22Z","modified":"2026-11-05T12:28:21Z","fixes":[{"ecosystem":"Debian:12","package":"webkit2gtk","fixed_in":["2.42.5-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.42.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.42.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wpewebkit","fixed_in":["2.42.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.42.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","fixed_in":["2.42.5-0ubuntu0.22.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1~deb11u1"}]}],"versions":["2.32.3-1","2.32.4-1","2.32.4-1~deb10u1","2.32.4-1~deb11u1","2.33.1-1","2.33.2-1","2.33.3-1","2.33.90-1","2.33.91-1","2.34.0-1","2.34.0-1~bpo11+1","2.34.1-1","2.34.1-1~deb10u1","2.34.1-1~deb11u1","2.34.2-1","2.34.2-1~bpo11+1","2.34.3-1","2.34.3-1~deb10u1","2.34.3-1~deb11u1","2.34.4-1","2.34.4-1~deb10u1","2.34.4-1~deb11u1","2.34.5-1","2.34.6-1","2.34.6-1~deb10u1","2.34.6-1~deb11u1","2.35.1-1","2.35.2-1","2.35.3-1","2.35.90-1","2.36.0-1","2.36.0-2","2.36.0-3","2.36.0-3~deb10u1","2.36.0-3~deb11u1","2.36.1-1","2.36.2-1","2.36.3-1","2.36.3-1~deb10u1","2.36.3-1~deb11u1","2.36.4-1","2.36.4-1~deb10u1","2.36.4-1~deb11u1","2.36.6-1","2.36.6-1~deb10u1","2.36.6-1~deb11u1","2.36.7-1","2.36.7-1~deb10u1","2.36.7-1~deb11u1","2.37.1-1","2.37.1-2","2.37.90-1","2.37.91-1","2.38.0-1","2.38.0-1~deb10u1","2.38.0-1~deb11u1","2.38.0-2","2.38.0-3","2.38.1-1","2.38.2-1","2.38.2-1~deb10u1","2.38.2-1~deb11u1","2.38.3-1","2.38.3-1~deb10u1","2.38.3-1~deb11u1","2.38.4-1","2.38.4-2","2.38.4-2~deb10u1","2.38.4-2~deb11u1","2.38.5-1","2.38.5-1+m68k","2.38.5-1~deb10u1","2.38.5-1~deb11u1","2.39.1-1","2.39.2-1","2.39.3-1","2.39.4-1","2.39.5-1","2.39.7-1","2.39.90-1","2.39.91-1","2.40.0-1","2.40.0-2","2.40.0-3","2.40.1-1","2.40.1-1~deb11u1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1~deb11u1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"webkit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.1-1.mga9"}]}],"bundled":33},{"source":"osv","ecosystem":"Rocky Linux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.42.5-1.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150200.104.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150200.104.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150200.104.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150200.104.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150200.104.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150200.104.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150200.104.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-2.168.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-2.168.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-2.168.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-2.168.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-150400.4.75.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150600.12.12.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150600.12.12.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150600.12.12.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150600.12.12.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150600.12.12.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150600.12.12.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150600.12.12.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150400.4.91.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150200.121.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150200.121.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150200.121.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.0-150200.121.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-0ubuntu0.22.04.2"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.5-0ubuntu0.22.04.2"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1"],"bundled":3}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/120304"},{"url":"https://support.apple.com/en-us/120306"},{"url":"https://support.apple.com/en-us/120309"},{"url":"https://support.apple.com/en-us/120310"},{"url":"https://support.apple.com/en-us/120311"},{"url":"https://support.apple.com/en-us/120339"},{"url":"https://support.apple.com/en-us/HT214059","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://support.apple.com/en-us/HT214063","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://support.apple.com/en-us/HT214055","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://support.apple.com/en-us/HT214056","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://support.apple.com/en-us/HT214060","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://support.apple.com/en-us/HT214061","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://support.apple.com/kb/HT214060","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT214063","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT214059","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT214061","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT214055","tags":["x_transferred","web"]},{"url":"https://support.apple.com/kb/HT214056","tags":["x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/27","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/33","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/36","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/34","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/39","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/40","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/05/8","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X2VJMEDT4GL42AQVHSYOT6DIVJDZWIV4/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/US43EQFC2IS66EA2CPAZFH2RQ6WD7PKF/","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23206"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/US43EQFC2IS66EA2CPAZFH2RQ6WD7PKF"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X2VJMEDT4GL42AQVHSYOT6DIVJDZWIV4"},{"url":"https://github.com/advisories/GHSA-73m5-j333-fcwc"},{"url":"https://access.redhat.com/errata/RHSA-2024:2126","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1745","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32359","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39928","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40414","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41983","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42852","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42883","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42890","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23206","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23213","tags":["report"]},{"url":"https://bugzilla.redhat.com/2241400","tags":["report"]},{"url":"https://bugzilla.redhat.com/2254326","tags":["report"]},{"url":"https://bugzilla.redhat.com/2254327","tags":["report"]},{"url":"https://bugzilla.redhat.com/2269743","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270141","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270143","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270151","tags":["report"]},{"url":"https://bugzilla.redhat.com/2271449","tags":["report"]},{"url":"https://bugzilla.redhat.com/2271453","tags":["report"]},{"url":"https://bugzilla.redhat.com/2271456","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2126.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2982","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2253058","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-2982.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2023-42875.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2023-42917.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2023-42970.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2023-43000.html","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-23206","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0148.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32202","tags":["report"]},{"url":"https://webkitgtk.org/2024/04/09/webkitgtk2.44.1-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/03/16/webkitgtk2.44.0-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/02/02/webkitgtk2.43.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/02/05/webkitgtk2.42.5-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/21/webkitgtk2.43.3-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/15/webkitgtk2.42.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/05/webkitgtk2.42.3-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/11/17/webkitgtk2.43.1-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/11/10/webkitgtk2.42.2-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/09/15/webkitgtk2.42.0-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/09/08/webkitgtk2.41.92-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/19/webkitgtk2.41.91-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/10/webkitgtk2.41.90-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/01/webkitgtk2.40.5-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/07/21/webkitgtk2.40.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/07/04/webkitgtk2.41.6-released.html","tags":["web"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2982","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271456","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240519-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219113","tags":["report"]},{"url":"https://bugzilla.suse.com/1219604","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23222","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240545-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240548-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243752-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231039","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4558","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243869-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243870-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-23206","tags":["report"]},{"url":"https://github.com/WebKit/WebKit/commit/36d57dc0f23f31be58323a88ba34a4fbf18e3998","tags":["report"]},{"url":"https://webkitgtk.org/security/WSA-2024-0001.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6631-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23222","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-23206","description":"An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user.","status":"published","published":"2024-01-23T00:25:22.555Z","modified":"2026-04-02T18:16:20.058Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:05.823187Z"}],"euvd":[{"id":"EUVD-2024-20725","description":"An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user.","status":"published","published":"2024-01-23T00:25:22Z","modified":"2026-04-02T18:16:20Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:20.345501Z"}],"ghsa":[{"id":"GHSA-73m5-j333-fcwc","title":"An access issue was addressed with improved access restrictions. This issue is fixed in watchOS...","description":"An access issue was addressed with improved access restrictions. This issue is fixed in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A maliciously crafted webpage may be able to fingerprint the user.","status":"published","published":"2024-01-23T03:31:08Z","modified":"2026-04-02T21:31:34Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:07:06.066601Z"}],"nvd":[{"id":"CVE-2024-23206","description":"An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user.","status":"published","published":"2024-01-23T01:15:10.84Z","modified":"2026-06-17T07:12:17.497Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:09:32.147098Z"}],"osv":[{"id":"CVE-2024-23206","description":"An access issue was addressed with improved access restrictions. This issue is fixed in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A maliciously crafted webpage may be able to fingerprint the user.","status":"published","published":"2024-01-23T01:15:10.84Z","modified":"2026-04-16T04:31:34.542280938Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:38.577405Z"},{"id":"DEBIAN-CVE-2024-23206","description":"An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user.","status":"published","published":"2024-01-23T01:15:10.84Z","modified":"2026-11-02T12:01:23.994861545Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"UBUNTU-CVE-2024-23206","description":"An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user.","status":"published","published":"2024-01-23T01:15:00Z","modified":"2026-10-28T20:15:36.067466157Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"ALSA-2024:2126","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)\n* webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)\n* webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)\n* webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)\n* webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)\n* webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)\n* webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)\n* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:41.976830708Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2982","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)\n* webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)\n* webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)\n* webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)\n* webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)\n* webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)\n* webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)\n* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-11-05T12:28:21.323908942Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"DSA-5618-1","title":"webkit2gtk - security update","status":"published","published":"2024-02-08T00:00:00Z","modified":"2026-03-09T02:09:02.478912Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0148","title":"Updated webkit2 packages fix security vulnerabilities","description":"Due to issues in our build system this package is very outdated, now\nthat the issues are fixed we are publishing the current upstream\nversion.\nLot of CVEs are fixed and a lot of changes were made by upstream, see\nthe links.\n","status":"published","published":"2024-04-26T06:47:12Z","modified":"2026-04-16T04:43:25.746626234Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"RLSA-2024:2982","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)\n\n* webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)\n\n* webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)\n\n* webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)\n\n* webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)\n\n* webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)\n\n* webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)\n\n* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2024-06-14T13:59:30.118978Z","modified":"2026-02-04T14:00:10.817786Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:0519-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.42.5 (bsc#1219604):\n\n- CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113).\n- CVE-2024-23206: Fixed fingerprint user via maliciously crafted webpages (bsc#1219604).\n- CVE-2024-23213: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n- CVE-2023-40414: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n- CVE-2014-1745: Fixed denial-of-service or potentially disclose memory contents while processing maliciously crafted files (bsc#1219604).\n- CVE-2023-42833: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n","status":"published","published":"2024-02-15T16:52:44Z","modified":"2026-02-04T02:22:42.518381Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0545-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.42.5 (bsc#1219604):\n\n- CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113).\n- CVE-2024-23206: Fixed fingerprint user via maliciously crafted webpages (bsc#1219604).\n- CVE-2024-23213: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n- CVE-2023-40414: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n- CVE-2014-1745: Fixed denial-of-service or potentially disclose memory contents while processing maliciously crafted files (bsc#1219604).\n- CVE-2023-42833: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n","status":"published","published":"2024-02-20T15:33:45Z","modified":"2026-02-04T02:55:03.948004Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0548-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.42.5 (bsc#1219604):\n\n- CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113).\n- CVE-2024-23206: Fixed fingerprint user via maliciously crafted webpages (bsc#1219604).\n- CVE-2024-23213: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n- CVE-2023-40414: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n- CVE-2014-1745: Fixed denial-of-service or potentially disclose memory contents while processing maliciously crafted files (bsc#1219604).\n- CVE-2023-42833: Fixed processing web content that may have led to arbitrary code execution (bsc#1219604).\n","status":"published","published":"2024-02-20T16:05:06Z","modified":"2026-02-04T03:26:25.349882Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:3752-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.46.0 (bsc#1231039).\n\n- CVE-2024-40866\n- CVE-2024-44187\n\nAlready fixed in version 2.44.3:\n\n- CVE-2024-27838\n- CVE-2024-27851\n\nAlready fixed in version 2.44.2:\n\n- CVE-2024-27834\n- CVE-2024-27808\n- CVE-2024-27820\n- CVE-2024-27833\n \nAlready fixed in version 2.44.1:\n\n- CVE-2024-23222\n- CVE-2024-23206\n- CVE-2024-23213\n- CVE-2024-23271\n","status":"published","published":"2024-10-24T03:33:43Z","modified":"2026-02-04T04:23:38.848079Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3869-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.46.0 (bsc#1231039).\n\n- CVE-2024-40866\n- CVE-2024-44187\n\nAlready fixed in version 2.44.3:\n\n- CVE-2024-4558\n- CVE-2024-27838\n- CVE-2024-27851\n    \nAlready fixed in version 2.44.2:\n\n- CVE-2024-27834\n- CVE-2024-27808\n- CVE-2024-27820\n- CVE-2024-27833\n\nAlready fixed in version 2.44.1:\n\n- CVE-2024-23222\n- CVE-2024-23206\n- CVE-2024-23213\n- CVE-2024-23271\n","status":"published","published":"2024-11-01T15:18:06Z","modified":"2026-02-04T03:42:29.197384Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3870-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\nUpdate to version 2.46.0 (bsc#1231039).\n\n- CVE-2024-40866\n- CVE-2024-44187\n\nAlready fixed in version 2.44.3:\n\n- CVE-2024-4558\n- CVE-2024-27838\n- CVE-2024-27851\n    \nAlready fixed in version 2.44.2:\n\n- CVE-2024-27834\n- CVE-2024-27808\n- CVE-2024-27820\n- CVE-2024-27833\n\nAlready fixed in version 2.44.1:\n\n- CVE-2024-23222\n- CVE-2024-23206\n- CVE-2024-23213\n- CVE-2024-23271\n","status":"published","published":"2024-11-01T15:19:11Z","modified":"2026-02-04T04:11:48.482878Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"USN-6631-1","title":"webkit2gtk vulnerabilities","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.\n","status":"published","published":"2024-02-12T13:07:31Z","modified":"2026-04-22T10:43:58.755068Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}