8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.8%
The issue was addressed with improved memory handling. This issue is fixed
in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3,
iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. Processing web content may lead
to arbitrary code execution.
Author | Note |
---|---|
jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
mdeslaur | It is no longer possible to build new webkit2gtk versions on focal and earlier. Marking as ignored. |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 22.04 | noarch | webkit2gtk | < 2.42.5-0ubuntu0.22.04.2 | UNKNOWN |
ubuntu | 23.10 | noarch | webkit2gtk | < 2.42.5-0ubuntu0.23.10.2 | UNKNOWN |
launchpad.net/bugs/cve/CVE-2024-23213
nvd.nist.gov/vuln/detail/CVE-2024-23213
security-tracker.debian.org/tracker/CVE-2024-23213
support.apple.com/en-us/HT214055
support.apple.com/en-us/HT214056
support.apple.com/en-us/HT214059
support.apple.com/en-us/HT214060
support.apple.com/en-us/HT214061
support.apple.com/en-us/HT214063
ubuntu.com/security/notices/USN-6631-1
webkitgtk.org/security/WSA-2024-0001.html
www.cve.org/CVERecord?id=CVE-2024-23213
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.8%