RHSA-2024:10481HighCVSS 6.5

Red Hat Security Advisory: webkit2gtk3 security update

Published
November 27, 2024
Last Modified
June 30, 2026

🔗 CVE IDs covered (5)

CVE-2024-23263 →CVE-2024-23280 →CVE-2024-23284 →CVE-2024-44309 →CVE-2024-23254 →

📋 Description

CVE-2024-23254 — webkit: malicious website may exfiltrate audio data cross-origin CVE-2024-23263 — webkit: processing malicious web content prevents Content Security Policy from being enforced CVE-2024-23280 — webkit: maliciously crafted webpage may be able to fingerprint the user CVE-2024-23284 — webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced CVE-2024-44309 — webkitgtk: data isolation bypass vulnerability

🔗 References (4)