RHSA-2022:8054MediumCVSS 8.8

Red Hat Security Advisory: webkit2gtk3 security and bug fix update

Published
November 15, 2022
Last Modified
June 26, 2026

🔗 CVE IDs covered (14)

CVE-2022-22628 →CVE-2022-22629 →CVE-2022-22662 →CVE-2022-26700 →CVE-2022-26709 →CVE-2022-26710 →CVE-2022-26716 →CVE-2022-26717 →CVE-2022-22624 →CVE-2022-26719 →CVE-2022-30293 →CVE-2022-32792 →CVE-2022-32816 →CVE-2022-32891 →

📋 Description

CVE-2022-22624 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-22628 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-22629 — webkitgtk: Buffer overflow leading to arbitrary code execution CVE-2022-22662 — webkitgtk: Cookie management issue leading to sensitive user information disclosure CVE-2022-26700 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2022-26709 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-26710 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-26716 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2022-26717 — webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-26719 — webkitgtk: Memory corruption issue leading to arbitrary code execution CVE-2022-30293 — webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution CVE-2022-32792 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2022-32816 — webkitgtk: malicious content may lead to UI spoofing CVE-2022-32891 — webkitgtk: UI spoofing while Visiting a website that frames malicious content

🔗 References (16)