A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade webkit2gtk3-jscUpgrade webkit2gtk3-develUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-devel | Nov 17, 2022 | Nov 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jsc | Jun 13, 2023 | Nov 1, 2022 |
| Apple Osx Webkit | apple-osx-upgrade-latest | Jun 1, 2022 | Jun 1, 2022 | |
| Apple Safari | apple-safari-upgrade-15_5apple-safari-windows-uninstall | May 17, 2022 | May 17, 2022 | |
| Centos_linux | — | Upgrade glib2-testsUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-debugsourceUpgrade glib2-famUpgrade glib2-tests-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade glib2-fam-debuginfoUpgrade glib2-develUpgrade webkit2gtk3-jscUpgrade glib2 | Nov 9, 2022 | Nov 1, 2022 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jun 2, 2022 | Jun 2, 2022 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 1, 2022 | Aug 31, 2022 |
| Oracle_linux | — | oracle-linux-upgrade-glib2oracle-linux-upgrade-glib2-develoracle-linux-upgrade-glib2-docoracle-linux-upgrade-glib2-famoracle-linux-upgrade-glib2-staticoracle-linux-upgrade-glib2-testsoracle-linux-upgrade-webkit2gtk3oracle-linux-upgrade-webkit2gtk3-develoracle-linux-upgrade-webkit2gtk3-jscoracle-linux-upgrade-webkit2gtk3-jsc-devel | Nov 16, 2022 | May 17, 2022 |
| Redhat_linux | — | Upgrade glib2-debugsourceUpgrade webkitgtk4-debuginfoUpgrade glib2-famUpgrade glib2-devel-debuginfoUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade glib2-staticUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkitgtk4-docUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade glib2-develUpgrade webkit2gtk3-devel-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-debuginfoUpgrade glib2Upgrade webkit2gtk3-jscUpgrade webkit2gtk3Upgrade webkit2gtk3-develNo solution existsUpgrade webkitgtk4-develUpgrade glib2-docUpgrade glib2-fam-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade glib2-tests | Nov 9, 2022 | Nov 1, 2022 |
| Rocky_linux | rocky-upgrade-webkit2gtk3rocky-upgrade-webkit2gtk3-debuginforocky-upgrade-webkit2gtk3-debugsourcerocky-upgrade-webkit2gtk3-develrocky-upgrade-webkit2gtk3-devel-debuginforocky-upgrade-webkit2gtk3-jscrocky-upgrade-webkit2gtk3-jsc-debuginforocky-upgrade-webkit2gtk3-jsc-develrocky-upgrade-webkit2gtk3-jsc-devel-debuginfo | Mar 12, 2024 | Nov 1, 2022 | |
| Suse | — | suse-upgrade-libjavascriptcoregtk-4_0-18suse-upgrade-libjavascriptcoregtk-4_0-18-32bitsuse-upgrade-libjavascriptcoregtk-4_1-0suse-upgrade-libjavascriptcoregtk-4_1-0-32bitsuse-upgrade-libjavascriptcoregtk-5_0-0suse-upgrade-libwebkit2gtk-4_0-37suse-upgrade-libwebkit2gtk-4_0-37-32bitsuse-upgrade-libwebkit2gtk-4_1-0suse-upgrade-libwebkit2gtk-4_1-0-32bitsuse-upgrade-libwebkit2gtk-5_0-0suse-upgrade-libwebkit2gtk3-langsuse-upgrade-typelib-1_0-javascriptcore-4_0suse-upgrade-typelib-1_0-javascriptcore-4_1suse-upgrade-typelib-1_0-javascriptcore-5_0suse-upgrade-typelib-1_0-webkit2-4_0suse-upgrade-typelib-1_0-webkit2-4_1suse-upgrade-typelib-1_0-webkit2-5_0suse-upgrade-typelib-1_0-webkit2webextension-4_0suse-upgrade-typelib-1_0-webkit2webextension-4_1suse-upgrade-typelib-1_0-webkit2webextension-5_0suse-upgrade-webkit-jsc-4suse-upgrade-webkit-jsc-4-1suse-upgrade-webkit-jsc-5-0suse-upgrade-webkit2gtk-4-0-langsuse-upgrade-webkit2gtk-4-1-langsuse-upgrade-webkit2gtk-4_0-injected-bundlessuse-upgrade-webkit2gtk-4_1-injected-bundlessuse-upgrade-webkit2gtk-5-0-langsuse-upgrade-webkit2gtk-5_0-injected-bundlessuse-upgrade-webkit2gtk3-develsuse-upgrade-webkit2gtk3-minibrowsersuse-upgrade-webkit2gtk3-soup2-develsuse-upgrade-webkit2gtk3-soup2-minibrowsersuse-upgrade-webkit2gtk4-develsuse-upgrade-webkit2gtk4-minibrowser | Oct 26, 2022 | Jun 9, 2022 |
| Ubuntu | ubuntu-upgrade-libjavascriptcoregtk-4-0-18ubuntu-upgrade-libjavascriptcoregtk-4-1-0ubuntu-upgrade-libwebkit2gtk-4-0-37ubuntu-upgrade-libwebkit2gtk-4-1-0 | Jun 2, 2022 | Jun 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub