Lucene search
Redhat.comRH:CVE-2023-42950HistoryMar 27, 2024 - 3:51 a.m.
CVE-2023-42950
2024-03-2703:51:06
redhat.com
access.redhat.com
14
heap use-after-free
webkit
arbitrary code execution
vulnerability
malicious web content
cve-2023-42950
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.9%
A heap use-after-free vulnerability was found in WebKit. Exploiting this flaw involves processing maliciously crafted web content, which may result in arbitrary code execution.
Related
nvd
nvd
CVE-2023-42950
2024-03-28 16:15:08
cve
cve
CVE-2023-42950
2024-03-28 16:15:08
ubuntucve
ubuntucve
CVE-2023-42950
2024-03-28 00:00:00
cvelist
cvelist
CVE-2023-42950
2024-03-28 15:39:16
debiancve
debiancve
CVE-2023-42950
2024-03-28 16:15:08
osv
osv
CVE-2023-42950
2024-03-28 16:15:08
webkit2gtk vulnerabilities
2024-04-15 16:29:45
webkit2gtk - security update
2024-05-09 00:00:00
amazon
amazon
Important: webkitgtk4
2024-02-01 19:57:00
nessus
nessus
Amazon Linux 2 : webkitgtk4 (ALAS-2024-2434)
2024-02-06 00:00:00
SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2024:1293-1)
2024-04-16 00:00:00
RHEL 8 : webkitgtk (Unpatched Vulnerability)
2024-06-03 00:00:00
apple
apple
About the security content of Safari 17.2
2023-12-11 00:00:00
About the security content of tvOS 17.2
2023-12-11 00:00:00
About the security content of watchOS 10.2
2023-12-11 00:00:00
openvas
openvas
Apple Safari Security Update (HT214039)
2023-12-14 00:00:00
Ubuntu: Security Advisory (USN-6732-1)
2024-04-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1293-1)
2024-05-07 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.44.1-1.fc40
2024-05-07 05:21:22
debian
debian
[SECURITY] [DSA 5684-1] webkit2gtk security update
2024-05-09 07:57:13
ubuntu
ubuntu
WebKitGTK vulnerabilities
2024-04-15 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2024-04-26 09:47:12
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.9%
Related for RH:CVE-2023-42950