The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jsc | Apr 1, 2024 | Mar 8, 2024 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Jun 25, 2026 | Mar 7, 2024 |
| Suse | — | Upgrade webkit2gtk3-develUpgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-WebKitWebProcessExtension-6_0Upgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk-4_1-0Upgrade webkit2gtk3-soup2-minibrowserUpgrade libwebkit2gtk-4_1-0-32bitUpgrade webkitgtk-6_0-injected-bundlesUpgrade WebKitGTK-4.0-langUpgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit-jsc-6.0Upgrade typelib-1_0-webkit2-4_1Upgrade libwebkit2gtk3-langUpgrade WebKitGTK-6.0-langUpgrade webkit2gtk4-develUpgrade libjavascriptcoregtk-4_0-18Upgrade webkit2gtk-4_1-injected-bundlesUpgrade webkit-jsc-4Upgrade libjavascriptcoregtk-4_1-0Upgrade webkit2gtk4-minibrowserUpgrade libwebkitgtk-6_0-4Upgrade typelib-1_0-JavaScriptCore-6_0Upgrade typelib-1_0-WebKit-6_0Upgrade typelib-1_0-javascriptcore-4_0Upgrade libjavascriptcoregtk-6_0-1Upgrade webkit-jsc-4.1Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit2gtk-4_0-injected-bundlesUpgrade typelib-1_0-webkit2webextension-4_1Upgrade libwebkit2gtk-4_0-37Upgrade webkit2gtk3-soup2-develUpgrade libjavascriptcoregtk-4_1-0-32bitUpgrade typelib-1_0-javascriptcore-4_1Upgrade WebKitGTK-4.1-lang | Jun 12, 2024 | Mar 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub