The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jscUpgrade webkitgtk4-develUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4Upgrade webkitgtk4-debuginfo | Jan 23, 2024 | Sep 27, 2023 |
| Apple Osx Airport | — | — | Oct 14, 2024 | Sep 27, 2023 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Sep 27, 2023 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Sep 27, 2023 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Sep 27, 2023 |
| Apple Osx Appsandbox | — | — | Oct 14, 2024 | Sep 27, 2023 |
| Apple Osx Webkit | apple-osx-upgrade-latest | Sep 28, 2023 | Sep 28, 2023 | |
| Apple Safari | apple-safari-upgrade-17apple-safari-windows-uninstall | Sep 27, 2023 | Sep 27, 2023 | |
| Azul Zulu | azul-zulu-upgrade-latest | Apr 19, 2024 | Sep 27, 2023 | |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Oct 16, 2023 | Sep 27, 2023 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Feb 1, 2024 | Sep 27, 2023 |
| Redhat_linux | — | No solution existsUpgrade webkitgtk4-develUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-docUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4Upgrade webkitgtk4-jsc | Jul 9, 2025 | Sep 27, 2023 |
| Suse | — | suse-upgrade-libjavascriptcoregtk-4_0-18suse-upgrade-libjavascriptcoregtk-4_0-18-32bitsuse-upgrade-libjavascriptcoregtk-4_0-18-64bitsuse-upgrade-libjavascriptcoregtk-4_1-0suse-upgrade-libjavascriptcoregtk-4_1-0-32bitsuse-upgrade-libjavascriptcoregtk-4_1-0-64bitsuse-upgrade-libjavascriptcoregtk-6_0-1suse-upgrade-libwebkit2gtk-4_0-37suse-upgrade-libwebkit2gtk-4_0-37-32bitsuse-upgrade-libwebkit2gtk-4_0-37-64bitsuse-upgrade-libwebkit2gtk-4_1-0suse-upgrade-libwebkit2gtk-4_1-0-32bitsuse-upgrade-libwebkit2gtk-4_1-0-64bitsuse-upgrade-libwebkit2gtk3-langsuse-upgrade-libwebkitgtk-6_0-4suse-upgrade-typelib-1_0-javascriptcore-4_0suse-upgrade-typelib-1_0-javascriptcore-4_1suse-upgrade-typelib-1_0-javascriptcore-6_0suse-upgrade-typelib-1_0-webkit-6_0suse-upgrade-typelib-1_0-webkit2-4_0suse-upgrade-typelib-1_0-webkit2-4_1suse-upgrade-typelib-1_0-webkit2webextension-4_0suse-upgrade-typelib-1_0-webkit2webextension-4_1suse-upgrade-typelib-1_0-webkitwebprocessextension-6_0suse-upgrade-webkit-jsc-4suse-upgrade-webkit-jsc-4-1suse-upgrade-webkit-jsc-6-0suse-upgrade-webkit2gtk-4_0-injected-bundlessuse-upgrade-webkit2gtk-4_1-injected-bundlessuse-upgrade-webkit2gtk3-develsuse-upgrade-webkit2gtk3-minibrowsersuse-upgrade-webkit2gtk3-soup2-develsuse-upgrade-webkit2gtk3-soup2-minibrowsersuse-upgrade-webkit2gtk4-develsuse-upgrade-webkit2gtk4-minibrowsersuse-upgrade-webkitgtk-4-0-langsuse-upgrade-webkitgtk-4-1-langsuse-upgrade-webkitgtk-6-0-langsuse-upgrade-webkitgtk-6_0-injected-bundles | Oct 27, 2023 | Sep 27, 2023 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libwebkitgtk-6.0-4Upgrade libjavascriptcoregtk-4.1-0Upgrade libwebkit2gtk-4.1-0Upgrade libjavascriptcoregtk-4.0-18Upgrade libjavascriptcoregtk-6.0-1 | Oct 11, 2023 | Sep 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub