vulnerability
Red Hat: CVE-2022-26709: CVE-2022-26709 webkitgtk: Use-after-free leading to arbitrary code execution (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Nov 1, 2022 | Nov 9, 2022 | Mar 27, 2026 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Nov 1, 2022
Added
Nov 9, 2022
Modified
Mar 27, 2026
Description
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.
Solutions
redhat-upgrade-glib2redhat-upgrade-glib2-debuginforedhat-upgrade-glib2-debugsourceredhat-upgrade-glib2-develredhat-upgrade-glib2-devel-debuginforedhat-upgrade-glib2-docredhat-upgrade-glib2-famredhat-upgrade-glib2-fam-debuginforedhat-upgrade-glib2-staticredhat-upgrade-glib2-testsredhat-upgrade-glib2-tests-debuginforedhat-upgrade-webkit2gtk3redhat-upgrade-webkit2gtk3-debuginforedhat-upgrade-webkit2gtk3-debugsourceredhat-upgrade-webkit2gtk3-develredhat-upgrade-webkit2gtk3-devel-debuginforedhat-upgrade-webkit2gtk3-jscredhat-upgrade-webkit2gtk3-jsc-debuginforedhat-upgrade-webkit2gtk3-jsc-develredhat-upgrade-webkit2gtk3-jsc-devel-debuginfo
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.