vulnerability
Debian: CVE-2024-27850: webkit2gtk, wpewebkit -- security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:N/I:C/A:N) | Jun 10, 2024 | Sep 27, 2024 | Apr 6, 2026 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:C/A:N)
Published
Jun 10, 2024
Added
Sep 27, 2024
Modified
Apr 6, 2026
Description
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. A maliciously crafted webpage may be able to fingerprint the user.
Solutions
debian-upgrade-webkit2gtkdebian-upgrade-wpewebkit
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.