6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
5.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
43.4%
An access issue was addressed with improved access restrictions. This issue
is fixed in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma
14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A maliciously crafted
webpage may be able to fingerprint the user.
Author | Note |
---|---|
jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
mdeslaur | It is no longer possible to build new webkit2gtk versions on focal and earlier. Marking as ignored. |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 22.04 | noarch | webkit2gtk | < 2.42.5-0ubuntu0.22.04.2 | UNKNOWN |
ubuntu | 23.10 | noarch | webkit2gtk | < 2.42.5-0ubuntu0.23.10.2 | UNKNOWN |
github.com/WebKit/WebKit/commit/36d57dc0f23f31be58323a88ba34a4fbf18e3998
launchpad.net/bugs/cve/CVE-2024-23206
nvd.nist.gov/vuln/detail/CVE-2024-23206
security-tracker.debian.org/tracker/CVE-2024-23206
support.apple.com/en-us/HT214055
support.apple.com/en-us/HT214056
support.apple.com/en-us/HT214059
support.apple.com/en-us/HT214060
support.apple.com/en-us/HT214061
support.apple.com/en-us/HT214063
ubuntu.com/security/notices/USN-6631-1
webkitgtk.org/security/WSA-2024-0001.html
www.cve.org/CVERecord?id=CVE-2024-23206
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
5.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
43.4%