RHSA-2023:4201HighCVSS 9.8

Red Hat Security Advisory: webkit2gtk3 security update

Published
July 18, 2023
Last Modified
June 26, 2026

🔗 CVE IDs covered (23)

CVE-2025-31206 →CVE-2025-31215 →CVE-2023-32435 →CVE-2023-42916 →CVE-2023-32439 →CVE-2023-35074 →CVE-2023-38594 →CVE-2025-24158 →CVE-2025-24223 →CVE-2023-28198 →CVE-2023-38595 →CVE-2024-23222 →CVE-2024-23252 · pendingCVE-2024-27834 →CVE-2024-54658 →CVE-2025-24264 →CVE-2025-31204 →CVE-2022-32885 →CVE-2023-37450 →CVE-2023-41074 →CVE-2023-41993 →CVE-2024-27808 →CVE-2024-27833 →

📋 Description

CVE-2022-32885 — webkitgtk: Memory corruption issue when processing web content CVE-2023-28198 — webkitgtk: use after free vulnerability CVE-2023-32435 — webkitgtk: memory corruption issue leading to arbitrary code execution CVE-2023-32439 — webkitgtk: type confusion issue leading to arbitrary code execution CVE-2023-35074 — webkitgtk: processing web content may lead to arbitrary code execution CVE-2023-37450 — webkitgtk: arbitrary code execution CVE-2023-38594 — webkitgtk: arbitrary code execution CVE-2023-38595 — webkitgtk: arbitrary code execution CVE-2023-41074 — webkitgtk: processing web content may lead to arbitrary code execution CVE-2023-41993 — webkitgtk: processing malicious web content may lead to arbitrary code execution CVE-2023-42916 — webkitgtk: Out-of-bounds read leads to sensitive data leak CVE-2024-23222 — webkitgtk: type confusion may lead to arbitrary code execution CVE-2024-23252 — webkit: processing malicious web content may lead to denial-of-service CVE-2024-27808 — webkitgtk: Processing web content may lead to arbitrary code execution CVE-2024-27833 — webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution CVE-2024-27834 — webkit: pointer authentication bypass CVE-2024-54658 — webkitgtk: Processing web content may lead to a denial-of-service CVE-2025-24158 — webkitgtk: Processing web content may lead to a denial-of-service CVE-2025-24223 — webkitgtk: Processing maliciously crafted web content may lead to memory corruption CVE-2025-24264 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-31204 — webkitgtk: Processing maliciously crafted web content may lead to memory corruption CVE-2025-31206 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-31215 — webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

🔗 References (5)