Known vulnerabilities in webkit2gtk3 (Red Hat package) - page 6
Vendor:
Red Hat Inc.
Software:
webkit2gtk3 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:webkit2gtk3_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
317
Public exploits:
14
Known exploited (KEV):
20
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.52.5-1.el8_8
2.52.5-1.el8_6
2.52.5-1.el8_4
2.52.5-1.el9_6
2.52.5-1.el9_4
2.52.5-1.el8_10
2.52.4-1.el9_2
2.52.4-1.el9_6
2.52.4-1.el9_4
2.52.4-1.el8_6
2.52.4-1.el8_8
2.52.4-1.el8_4
2.52.4-1.el9_8
2.52.4-1.el8_10
2.52.3-1.el9_0
2.52.3-1.el9_2
2.52.3-1.el8_4
2.52.3-1.el9_4
2.52.3-1.el8_6
2.52.3-1.el8_8
2.52.3-1.el9_6
2.52.3-1.el8_10
2.52.3-0.el9_7.1
2.50.3-2.el8_6
2.50.4-1.el9_6
2.50.4-1.el8_8
2.50.4-1.el9_4
2.50.4-1.el9_2
2.50.4-1.el9_0
2.50.4-1.el8_2
2.50.4-1.el8_6
2.50.4-1.el8_4
2.50.3-2.el8_8
2.50.4-1.el9_7
2.50.4-1.el8_10
2.50.3-1.el9_4
2.50.3-1.el9_2
2.50.3-2.el8_4
2.50.3-2.el8_2
2.50.3-1.el9_6
2.50.3-1.el9_7
2.50.3-1.el8_10
2.50.1-1.el8_2
2.50.1-1.el8_4
2.50.1-1.el8_8
2.50.1-1.el8_6
2.50.1-1.el9_0
2.50.1-1.el8_10
2.50.0-1.el8_8.1
2.50.0-1.el8_4
2.50.0-1.el8_2
2.50.0-1.el8_6
2.50.1-0.el9_6
2.50.0-1.el8_10
2.50.0-2.el9_2
2.50.0-2.el9_4
2.50.0-2.el9_0
2.48.5-1.el8_4
2.48.5-1.el8_8
2.48.5-1.el8_6
2.48.5-1.el8_2
2.48.5-1.el9_4
2.48.5-1.el9_0
2.48.5-1.el9_2
2.48.5-1.el8_10
2.48.5-1.el9_6
2.48.2-1.el9_2
2.48.2-1.el8_6
2.48.2-1.el9_4
2.48.2-1.el9_0
2.48.2-1.el8_8
2.48.2-1.el8_2
2.48.2-1.el8_4
2.48.1-2.el8_2
2.48.1-2.el8_6
2.48.1-2.el8_4
2.48.2-1.el8_10
2.48.1-1.el9_6
2.48.1-1.el8_10
2.48.1-3.el9_2
2.48.1-2.el9_4
2.48.1-1.el9_5
2.46.6-2.el8_4
2.46.6-2.el8_2
2.46.6-2.el9_2
2.46.6-2.el9_0
2.46.6-2.el8_8
2.46.6-2.el9_4
2.46.6-2.el9_5
2.46.6-2.el8_10
2.46.6-1.el9_5
2.46.6-1.el8_10
2.46.5-1.el9_2
2.46.5-1.el9_0
2.46.5-1.el8_8
2.46.5-1.el8_4
2.46.5-1.el8_6
2.46.5-1.el8_2
2.46.5-1.el9_4
2.46.5-1.el9_5
2.46.5-1.el8_10
2.46.3-2.el8_4
2.46.3-2.el9_0
2.46.3-2.el8_8
2.46.3-2.el8_6
2.46.3-2.el9_4
2.46.3-2.el9_2
2.46.3-2.el8_10
2.46.3-2.el8_2
2.46.3-2.el9_5
2.46.3-1.el8_2
2.46.3-1.el8_4
2.46.3-1.el8_6
2.46.3-1.el8_8
2.46.3-1.el9_2
2.46.3-1.el9_0
2.46.3-1.el8_10
2.46.3-1.el9_5
2.46.3-1.el9_4
2.44.3-2.el9
2.46.1-1.el9_0
2.46.1-1.el9_2
2.46.1-2.el9_4
2.42.5-1.el8
2.42.5-1.el9
2.40.5-1.el8_9.1
2.40.5-1.el9_3.1
2.40.5-1.el8
2.40.5-1.el9
2.38.5-1.el8_8.5
2.38.5-1.el9_2.3
2.38.5-1.el8_8.4
2.38.5-1.el9_2.2
2.38.5-1.el8
2.38.5-1.el8_8.3
2.38.5-1.el9_2.1
2.38.5-1.el9
2.36.7-1.el9_1.3
2.36.7-1.el8_7.3
2.36.7-1.el8_7.2
2.36.7-1.el9_1.2
2.32.3-2.el8
2.28.4-1.el8
2.36.7-1.el9_1.1
2.36.7-1.el8_7.1
2.36.7-1.el9
2.36.7-1.el8
2.36.7-1.el9_0
2.36.7-1.el8_6
2.34.6-1.el8
2.24.4-4.el8_2
2.24.4-4.el8_1
2.30.4-3.el8_4
2.30.4-1.el8
2.24.4-2.el8_1
2.24.3-1.el8
Vulnerabilities (317)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU106882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-24208 |
CWE-79 | Medium | 2.48.1-1.el8_10, 2.48.1-1.el9_5, 2.48.1-1.el9_6, 2.48.1-2.el8_2, 2.48.1-2.el8_4, 2.48.1-2.el8_6, 2.48.1-2.el9_4, 2.48.1-3.el9_2 | 02.04.2025 |
SB20250402143 SB2025040107 SB20250402142 and 23 more |
||
| #VU106833 - Use After Free CVE-2025-30427 |
CWE-416 | Low | 2.48.1-1.el8_10, 2.48.1-1.el9_5, 2.48.1-1.el9_6, 2.48.1-2.el8_2, 2.48.1-2.el8_4, 2.48.1-2.el8_6, 2.48.1-2.el9_4, 2.48.1-3.el9_2 | 02.04.2025 |
SB20250402143 SB2025040103 SB20250402145 and 28 more |
||
| #VU106832 - Memory corruption CVE-2025-24209 |
CWE-119 | Low | 2.48.1-1.el8_10, 2.48.1-1.el9_5, 2.48.1-1.el9_6, 2.48.1-2.el8_2, 2.48.1-2.el8_4, 2.48.1-2.el8_6, 2.48.1-2.el9_4, 2.48.1-3.el9_2 | 02.04.2025 |
SB20250402142 SB20250402143 SB2025040103 and 27 more |
||
| #VU106831 - Memory corruption CVE-2025-24216 |
CWE-119 | Low | 2.48.1-1.el8_10, 2.48.1-1.el9_5, 2.48.1-1.el9_6, 2.48.1-2.el8_2, 2.48.1-2.el8_4, 2.48.1-2.el8_6, 2.48.1-2.el9_4, 2.48.1-3.el9_2 | 02.04.2025 |
SB20250402142 SB20250402143 SB2025040103 and 28 more |
||
| #VU105914 - Memory corruption CVE-2024-54551 |
CWE-119 | Low | 2.48.1-1.el8_10, 2.48.1-1.el9_5, 2.48.1-1.el9_6, 2.48.1-2.el8_2, 2.48.1-2.el8_4, 2.48.1-2.el8_6, 2.48.1-2.el9_4, 2.48.1-3.el9_2 | 21.03.2025 |
SB2025032103 SB2024073059 SB2024073048 and 27 more |
||
| #VU105548 - Out-of-bounds write CVE-2025-24201 |
CWE-787 | Critical | 2.46.6-2.el8_2, 2.46.6-2.el8_4, 2.46.6-2.el8_8, 2.46.6-2.el8_10, 2.46.6-2.el9_0, 2.46.6-2.el9_2, 2.46.6-2.el9_4, 2.46.6-2.el9_5 | 11.03.2025 |
SB2025031182 SB2025031183 SB2025031185 and 41 more |
||
| #VU103748 - Memory corruption CVE-2024-54543 |
CWE-119 | High | 2.46.6-1.el8_10, 2.46.6-1.el9_5 | 10.02.2025 |
SB2025021068 SB2025021346 SB2025021347 and 19 more |
||
| #VU103355 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-24150 |
CWE-78 | Medium | 2.46.6-1.el8_10, 2.46.6-1.el9_5 | 27.01.2025 |
SB2025012783 SB2025012784 SB2025012802 and 13 more |
||
| #VU103354 - Improper input validation CVE-2025-24162 |
CWE-20 | Low | 2.46.6-1.el8_10, 2.46.6-1.el9_5 | 27.01.2025 |
SB2025012782 SB2025012783 SB2025012784 and 20 more |
||
| #VU103353 - Memory corruption CVE-2025-24158 |
CWE-119 | Low | 2.46.6-1.el8_10, 2.46.6-1.el9_5 | 27.01.2025 |
SB2025012782 SB2025012783 SB2025012784 and 16 more |
||
| #VU103352 - Exposure of sensitive information to an unauthorized actor CVE-2025-24143 |
CWE-200 | Low | 2.46.6-1.el8_10, 2.46.6-1.el9_5 | 27.01.2025 |
SB2025012782 SB2025012783 SB2025012784 and 15 more |
||
| #VU101722 - Type confusion CVE-2024-54505 |
CWE-843 | High | 2.46.5-1.el8_2, 2.46.5-1.el8_4, 2.46.5-1.el8_6, 2.46.5-1.el8_8, 2.46.5-1.el8_10, 2.46.5-1.el9_0, 2.46.5-1.el9_2, 2.46.5-1.el9_4, 2.46.5-1.el9_5 | 11.12.2024 |
SB2024121199 SB20241211100 SB2024121203 and 29 more |
||
| #VU101721 - Improper input validation CVE-2024-54508 |
CWE-20 | Low | 2.46.5-1.el8_2, 2.46.5-1.el8_4, 2.46.5-1.el8_6, 2.46.5-1.el8_8, 2.46.5-1.el8_10, 2.46.5-1.el9_0, 2.46.5-1.el9_2, 2.46.5-1.el9_4, 2.46.5-1.el9_5 | 11.12.2024 |
SB2024121199 SB20241211100 SB2024121203 and 29 more |
||
| #VU101720 - Improper input validation CVE-2024-54502 |
CWE-20 | Low | 2.46.5-1.el8_2, 2.46.5-1.el8_4, 2.46.5-1.el8_6, 2.46.5-1.el8_8, 2.46.5-1.el8_10, 2.46.5-1.el9_0, 2.46.5-1.el9_2, 2.46.5-1.el9_4, 2.46.5-1.el9_5 | 11.12.2024 |
SB2024121199 SB20241211100 SB2024121203 and 29 more |
||
| #VU101719 - Improper input validation CVE-2024-54479 |
CWE-20 | Low | 2.46.5-1.el8_2, 2.46.5-1.el8_4, 2.46.5-1.el8_6, 2.46.5-1.el8_8, 2.46.5-1.el8_10, 2.46.5-1.el9_0, 2.46.5-1.el9_2, 2.46.5-1.el9_4, 2.46.5-1.el9_5 | 11.12.2024 |
SB2024121199 SB20241211100 SB2024121203 and 31 more |
||
| #VU100668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-44309 |
CWE-79 | High | 2.46.3-2.el8_2, 2.46.3-2.el8_4, 2.46.3-2.el8_6, 2.46.3-2.el8_8, 2.46.3-2.el8_10, 2.46.3-2.el9_0, 2.46.3-2.el9_2, 2.46.3-2.el9_4, 2.46.3-2.el9_5 | 19.11.2024 |
SB2024111981 SB2024111982 SB2024111983 and 29 more |
||
| #VU99420 - Memory corruption CVE-2024-44244 |
CWE-119 | High | 2.46.3-1.el8_2, 2.46.3-1.el8_4, 2.46.3-1.el8_6, 2.46.3-1.el8_8, 2.46.3-1.el8_10, 2.46.3-1.el9_0, 2.46.3-1.el9_2, 2.46.3-1.el9_4, 2.46.3-1.el9_5 | 28.10.2024 |
SB2024102849 SB2024102850 SB2024102852 and 33 more |
||
| #VU98743 - Memory corruption CVE-2024-44185 |
CWE-119 | Low | 2.46.3-1.el8_2, 2.46.3-1.el8_4, 2.46.3-1.el8_6, 2.46.3-1.el8_8, 2.46.3-1.el8_10, 2.46.3-1.el9_0, 2.46.3-1.el9_2, 2.46.3-1.el9_5 | 16.10.2024 |
SB2024101669 SB2024073059 SB2024073048 and 29 more |
||
| #VU95316 - Integer overflow CVE-2024-27833 |
CWE-190 | High | 2.46.1-1.el9_0, 2.46.3-1.el8_2, 2.46.3-1.el8_4, 2.46.3-1.el8_6, 2.46.3-1.el8_8, 2.46.3-1.el9_2 | 05.08.2024 |
SB2024080504 SB2024051361 SB2024051402 and 18 more |
||
| #VU95303 - Memory corruption CVE-2024-27808 |
CWE-119 | High | 2.46.1-1.el9_0, 2.46.3-1.el8_2, 2.46.3-1.el8_4, 2.46.3-1.el8_6, 2.46.3-1.el8_8, 2.46.3-1.el9_2 | 05.08.2024 |
SB2024080504 SB2024051401 SB2024051402 and 17 more |
Showing elements 101 - 120 out of 317