rpm package
suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP4
pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4
Vulnerabilities (78)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-42799 | — | < 2.38.2-150400.4.22.1 | 2.38.2-150400.4.22.1 | Nov 1, 2022 | The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing. | ||
| CVE-2022-32923 | — | < 2.38.2-150400.4.22.1 | 2.38.2-150400.4.22.1 | Nov 1, 2022 | A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the ap | ||
| CVE-2022-32888 | — | < 2.38.2-150400.4.22.1 | 2.38.2-150400.4.22.1 | Nov 1, 2022 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lead to arbitrary code | ||
| CVE-2022-26719 | — | < 2.36.3-150400.4.3.1 | 2.36.3-150400.4.3.1 | Nov 1, 2022 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution. | ||
| CVE-2022-26717 | — | < 2.36.3-150400.4.3.1 | 2.36.3-150400.4.3.1 | Nov 1, 2022 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to arbitrary code execu | ||
| CVE-2022-26716 | — | < 2.36.3-150400.4.3.1 | 2.36.3-150400.4.3.1 | Nov 1, 2022 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution. | ||
| CVE-2022-26710 | — | < 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 | Nov 1, 2022 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution. | ||
| CVE-2022-26709 | — | < 2.36.3-150400.4.3.1 | 2.36.3-150400.4.3.1 | Nov 1, 2022 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution. | ||
| CVE-2022-22677 | — | < 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 | Nov 1, 2022 | A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call. | ||
| CVE-2022-32816 | — | < 2.36.5-150400.4.9.1 | 2.36.5-150400.4.9.1 | Sep 23, 2022 | The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may lead to UI spoofing. | ||
| CVE-2022-32792 | — | < 2.36.5-150400.4.9.1 | 2.36.5-150400.4.9.1 | Sep 23, 2022 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution. | ||
| CVE-2022-26700 | — | < 2.36.3-150400.4.3.1 | 2.36.3-150400.4.3.1 | Sep 23, 2022 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to code execution. | ||
| CVE-2022-32912 | — | < 2.36.8-150400.4.15.1 | 2.36.8-150400.4.15.1 | Sep 20, 2022 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution. | ||
| CVE-2022-32886 | — | < 2.36.8-150400.4.15.1 | 2.36.8-150400.4.15.1 | Sep 20, 2022 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution. | ||
| CVE-2022-32893 | — | KEV | < 2.36.7-150400.4.12.1 | 2.36.7-150400.4.12.1 | Aug 24, 2022 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that th | |
| CVE-2022-22662 | — | < 2.36.4-150400.4.6.2 | 2.36.4-150400.4.6.2 | May 26, 2022 | A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information. | ||
| CVE-2022-30293 | — | < 2.36.3-150400.4.3.1 | 2.36.3-150400.4.3.1 | May 6, 2022 | In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp. | ||
| CVE-2022-0108 | — | < 2.38.6-150400.4.39.1 | 2.38.6-150400.4.39.1 | Feb 11, 2022 | Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
- CVE-2022-42799Nov 1, 2022affected < 2.38.2-150400.4.22.1fixed 2.38.2-150400.4.22.1
The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.
- CVE-2022-32923Nov 1, 2022affected < 2.38.2-150400.4.22.1fixed 2.38.2-150400.4.22.1
A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the ap
- CVE-2022-32888Nov 1, 2022affected < 2.38.2-150400.4.22.1fixed 2.38.2-150400.4.22.1
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lead to arbitrary code
- CVE-2022-26719Nov 1, 2022affected < 2.36.3-150400.4.3.1fixed 2.36.3-150400.4.3.1
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2022-26717Nov 1, 2022affected < 2.36.3-150400.4.3.1fixed 2.36.3-150400.4.3.1
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to arbitrary code execu
- CVE-2022-26716Nov 1, 2022affected < 2.36.3-150400.4.3.1fixed 2.36.3-150400.4.3.1
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2022-26710Nov 1, 2022affected < 2.36.4-150400.4.6.2fixed 2.36.4-150400.4.6.2
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2022-26709Nov 1, 2022affected < 2.36.3-150400.4.3.1fixed 2.36.3-150400.4.3.1
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2022-22677Nov 1, 2022affected < 2.36.4-150400.4.6.2fixed 2.36.4-150400.4.6.2
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.
- CVE-2022-32816Sep 23, 2022affected < 2.36.5-150400.4.9.1fixed 2.36.5-150400.4.9.1
The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may lead to UI spoofing.
- CVE-2022-32792Sep 23, 2022affected < 2.36.5-150400.4.9.1fixed 2.36.5-150400.4.9.1
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2022-26700Sep 23, 2022affected < 2.36.3-150400.4.3.1fixed 2.36.3-150400.4.3.1
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to code execution.
- CVE-2022-32912Sep 20, 2022affected < 2.36.8-150400.4.15.1fixed 2.36.8-150400.4.15.1
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
- CVE-2022-32886Sep 20, 2022affected < 2.36.8-150400.4.15.1fixed 2.36.8-150400.4.15.1
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
- affected < 2.36.7-150400.4.12.1fixed 2.36.7-150400.4.12.1
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that th
- CVE-2022-22662May 26, 2022affected < 2.36.4-150400.4.6.2fixed 2.36.4-150400.4.6.2
A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-30293May 6, 2022affected < 2.36.3-150400.4.3.1fixed 2.36.3-150400.4.3.1
In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
- CVE-2022-0108Feb 11, 2022affected < 2.38.6-150400.4.39.1fixed 2.38.6-150400.4.39.1
Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Page 4 of 4