Search CVE reports


Toggle filters

41 – 50 of 669 results


CVE-2022-32919

Medium priority

Some fixes available 5 of 20

The issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Visiting a website that frames malicious content may lead to UI spoofing.

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Fixed Fixed Fixed Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Ignored Ignored
Show less packages

CVE-2023-42883

Medium priority

Some fixes available 3 of 19

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. Processing an image may lead to...

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Not affected Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Ignored Ignored
Show less packages

CVE-2023-42890

Medium priority

Some fixes available 2 of 18

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 10.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2. Processing web content may lead to arbitrary code execution.

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Not affected Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Ignored Ignored
Show less packages

CVE-2023-42917

Medium priority

Some fixes available 4 of 20

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is...

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Fixed Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Not in release Not in release
Show less packages

CVE-2023-42916

Medium priority

Some fixes available 4 of 20

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware...

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Fixed Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Not in release Not in release
Show less packages

CVE-2023-42852

Medium priority

Some fixes available 4 of 20

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary...

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Fixed Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Not in release Not in release
Show less packages

CVE-2023-41983

Medium priority

Some fixes available 4 of 20

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-of-service.

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Fixed Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Not in release Not in release
Show less packages

CVE-2023-32359

Medium priority

Some fixes available 2 of 18

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2. A user's password may be read aloud by VoiceOver.

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Not affected Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Ignored Ignored
Show less packages

CVE-2023-39928

Medium priority

Some fixes available 2 of 18

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would...

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Not affected Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Ignored Ignored
Show less packages

CVE-2023-41074

Medium priority

Some fixes available 2 of 18

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

5 affected packages

qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk, wpewebkit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
qtwebkit-opensource-src Ignored Ignored Ignored Ignored Ignored
qtwebkit-source Not in release Not in release Not in release Ignored Ignored
webkit2gtk Not affected Fixed Ignored Ignored Ignored
webkitgtk Not in release Not in release Not in release Ignored Ignored
wpewebkit Not in release Ignored Ignored Ignored Ignored
Show less packages