An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade webkit2gtk | Jul 31, 2018 | Apr 3, 2018 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 11.1 | Apr 2, 2018 | Apr 2, 2018 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Apr 3, 2018 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Aug 23, 2018 | Apr 3, 2018 |
| Oracle Solaris | — | Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | Apr 3, 2018 |
| Suse | — | Upgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2-4_0Upgrade typelib-1_0-javascriptcore-4_0Upgrade typelib-1_0-webkit2webextension-4_0Upgrade libwebkit2gtk-4_0-37Upgrade libwebkit2gtk3-langUpgrade webkit2gtk-4_0-injected-bundlesUpgrade libjavascriptcoregtk-4_0-18 | May 20, 2018 | Apr 3, 2018 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | May 10, 2018 | Apr 3, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub