rpm package

suse/webkit2gtk3&distro=SUSE OpenStack Cloud 8

pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208

Vulnerabilities (173)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2019-8846	Hig	8.8	< 2.28.1-2.50.3	2.28.1-2.50.3	Oct 27, 2020	A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to ar
CVE-2019-8844	Hig	8.8	< 2.28.1-2.50.3	2.28.1-2.50.3	Oct 27, 2020	Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted w
CVE-2019-8835	Hig	8.8	< 2.28.1-2.50.3	2.28.1-2.50.3	Oct 27, 2020	Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may
CVE-2019-8771	Med	6.1	< 2.28.1-2.50.3	2.28.1-2.50.3	Oct 27, 2020	This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.
CVE-2020-9983	Hig	8.8	< 2.32.1-2.63.3	2.32.1-2.63.3	Oct 16, 2020	An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
CVE-2020-9952	Hig	7.1	< 2.34.3-2.82.1	2.34.3-2.82.1	Oct 16, 2020	An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scri
CVE-2020-9951	Hig	8.8	< 2.32.1-2.63.3	2.32.1-2.63.3	Oct 16, 2020	A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2020-9948	Hig	8.8	< 2.32.1-2.63.3	2.32.1-2.63.3	Oct 16, 2020	A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2020-9925	Med	6.1	< 2.28.4-2.59.1	2.28.4-2.59.1	Oct 16, 2020	A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lea
CVE-2020-9915	Med	6.5	< 2.28.4-2.59.1	2.28.4-2.59.1	Oct 16, 2020	An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20
CVE-2020-9895	Cri	9.8	< 2.28.4-2.59.1	2.28.4-2.59.1	Oct 16, 2020	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause u
CVE-2020-9894	Med	4.3	< 2.28.4-2.59.1	2.28.4-2.59.1	Oct 16, 2020	An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause une
CVE-2020-9893	Hig	8.8	< 2.28.4-2.59.1	2.28.4-2.59.1	Oct 16, 2020	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause u
CVE-2020-9862	Hig	7.8	< 2.28.4-2.59.1	2.28.4-2.59.1	Oct 16, 2020	A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Copying a
CVE-2020-13753	Cri	10.0	< 2.28.3-2.56.1	2.28.3-2.56.1	Jul 14, 2020	The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to dire
CVE-2020-9850	Cri	9.8	< 2.28.3-2.56.1	2.28.3-2.56.1	Jun 9, 2020	A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code
CVE-2020-9843	Hig	7.1	< 2.28.3-2.56.1	2.28.3-2.56.1	Jun 9, 2020	An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web con
CVE-2020-9807	Hig	8.8	< 2.28.3-2.56.1	2.28.3-2.56.1	Jun 9, 2020	A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web con
CVE-2020-9806	Hig	8.8	< 2.28.3-2.56.1	2.28.3-2.56.1	Jun 9, 2020	A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web con
CVE-2020-9805	Hig	7.1	< 2.28.3-2.56.1	2.28.3-2.56.1	Jun 9, 2020	A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to

CVE-2019-8846HigOct 27, 2020
affected < 2.28.1-2.50.3fixed 2.28.1-2.50.3
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to ar
CVE-2019-8844HigOct 27, 2020
affected < 2.28.1-2.50.3fixed 2.28.1-2.50.3
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted w
CVE-2019-8835HigOct 27, 2020
affected < 2.28.1-2.50.3fixed 2.28.1-2.50.3
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may
CVE-2019-8771MedOct 27, 2020
affected < 2.28.1-2.50.3fixed 2.28.1-2.50.3
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.
CVE-2020-9983HigOct 16, 2020
affected < 2.32.1-2.63.3fixed 2.32.1-2.63.3
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
CVE-2020-9952HigOct 16, 2020
affected < 2.34.3-2.82.1fixed 2.34.3-2.82.1
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scri
CVE-2020-9951HigOct 16, 2020
affected < 2.32.1-2.63.3fixed 2.32.1-2.63.3
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2020-9948HigOct 16, 2020
affected < 2.32.1-2.63.3fixed 2.32.1-2.63.3
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2020-9925MedOct 16, 2020
affected < 2.28.4-2.59.1fixed 2.28.4-2.59.1
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lea
CVE-2020-9915MedOct 16, 2020
affected < 2.28.4-2.59.1fixed 2.28.4-2.59.1
An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20
CVE-2020-9895CriOct 16, 2020
affected < 2.28.4-2.59.1fixed 2.28.4-2.59.1
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause u
CVE-2020-9894MedOct 16, 2020
affected < 2.28.4-2.59.1fixed 2.28.4-2.59.1
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause une
CVE-2020-9893HigOct 16, 2020
affected < 2.28.4-2.59.1fixed 2.28.4-2.59.1
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause u
CVE-2020-9862HigOct 16, 2020
affected < 2.28.4-2.59.1fixed 2.28.4-2.59.1
A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Copying a
CVE-2020-13753CriJul 14, 2020
affected < 2.28.3-2.56.1fixed 2.28.3-2.56.1
The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to dire
CVE-2020-9850CriJun 9, 2020
affected < 2.28.3-2.56.1fixed 2.28.3-2.56.1
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code
CVE-2020-9843HigJun 9, 2020
affected < 2.28.3-2.56.1fixed 2.28.3-2.56.1
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web con
CVE-2020-9807HigJun 9, 2020
affected < 2.28.3-2.56.1fixed 2.28.3-2.56.1
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web con
CVE-2020-9806HigJun 9, 2020
affected < 2.28.3-2.56.1fixed 2.28.3-2.56.1
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web con
CVE-2020-9805HigJun 9, 2020
affected < 2.28.3-2.56.1fixed 2.28.3-2.56.1
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to

Page 5 of 9