csaf_redhat - rhsa-2023

rhsa-2023_6535

Vulnerability from csaf_redhat

Published

2023-11-07 08:48

Modified

2024-12-12 15:53

Summary

Red Hat Security Advisory: webkit2gtk3 security and bug fix update

Notes

Topic

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: arbitrary code execution (CVE-2023-32393) * webkitgtk: bypass Same Origin Policy (CVE-2023-38572) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592) * webkitgtk: arbitrary code execution (CVE-2023-38594) * webkitgtk: arbitrary code execution (CVE-2023-38595) * webkitgtk: arbitrary code execution (CVE-2023-38597) * webkitgtk: arbitrary code execution (CVE-2023-38600) * webkitgtk: arbitrary code execution (CVE-2023-38611) * webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885) * webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932) * webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954) * webkitgtk: use after free vulnerability (CVE-2023-28198) * webkitgtk: content security policy blacklist failure (CVE-2023-32370) * webkitgtk: disclose sensitive information (CVE-2023-38133) * webkitgtk: track sensitive user information (CVE-2023-38599) * webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434) * webkitgtk: arbitrary javascript code execution (CVE-2023-40397) * webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: arbitrary code execution (CVE-2023-32393)\n\n* webkitgtk: bypass Same Origin Policy (CVE-2023-38572)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592)\n\n* webkitgtk: arbitrary code execution (CVE-2023-38594)\n\n* webkitgtk: arbitrary code execution (CVE-2023-38595)\n\n* webkitgtk: arbitrary code execution (CVE-2023-38597)\n\n* webkitgtk: arbitrary code execution (CVE-2023-38600)\n\n* webkitgtk: arbitrary code execution (CVE-2023-38611)\n\n* webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)\n\n* webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932)\n\n* webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954)\n\n* webkitgtk: use after free vulnerability (CVE-2023-28198)\n\n* webkitgtk: content security policy blacklist failure (CVE-2023-32370)\n\n* webkitgtk: disclose sensitive information (CVE-2023-38133)\n\n* webkitgtk: track sensitive user information (CVE-2023-38599)\n\n* webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434)\n\n* webkitgtk: arbitrary javascript code execution (CVE-2023-40397)\n\n* webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:6535",
        "url": "https://access.redhat.com/errata/RHSA-2023:6535"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2176270",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2176270"
      },
      {
        "category": "external",
        "summary": "2224608",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224608"
      },
      {
        "category": "external",
        "summary": "2231015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231015"
      },
      {
        "category": "external",
        "summary": "2231017",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231017"
      },
      {
        "category": "external",
        "summary": "2231018",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231018"
      },
      {
        "category": "external",
        "summary": "2231019",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231019"
      },
      {
        "category": "external",
        "summary": "2231020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231020"
      },
      {
        "category": "external",
        "summary": "2231021",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231021"
      },
      {
        "category": "external",
        "summary": "2231022",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231022"
      },
      {
        "category": "external",
        "summary": "2231028",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231028"
      },
      {
        "category": "external",
        "summary": "2231043",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231043"
      },
      {
        "category": "external",
        "summary": "2236842",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236842"
      },
      {
        "category": "external",
        "summary": "2236843",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236843"
      },
      {
        "category": "external",
        "summary": "2236844",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236844"
      },
      {
        "category": "external",
        "summary": "2238943",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238943"
      },
      {
        "category": "external",
        "summary": "2238944",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238944"
      },
      {
        "category": "external",
        "summary": "2238945",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238945"
      },
      {
        "category": "external",
        "summary": "2241405",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241405"
      },
      {
        "category": "external",
        "summary": "2241409",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241409"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6535.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security and bug fix update",
    "tracking": {
      "current_release_date": "2024-12-12T15:53:29+00:00",
      "generator": {
        "date": "2024-12-12T15:53:29+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2023:6535",
      "initial_release_date": "2023-11-07T08:48:15+00:00",
      "revision_history": [
        {
          "date": "2023-11-07T08:48:15+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-11-07T08:48:15+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-12T15:53:29+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.3.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.40.5-1.el9.src",
                "product": {
                  "name": "webkit2gtk3-0:2.40.5-1.el9.src",
                  "product_id": "webkit2gtk3-0:2.40.5-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.40.5-1.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.40.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.40.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.40.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.40.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.40.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.40.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.40.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.40.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.40.5-1.el9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.40.5-1.el9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.40.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-devel-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.40.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.40.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.40.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.40.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.40.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.40.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.40.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.40.5-1.el9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.40.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.40.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.40.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.40.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.40.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.40.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.40.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.40.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.40.5-1.el9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.40.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.40.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.40.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.40.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.40.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.40.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.40.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.40.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.40.5-1.el9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.40.5-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src"
        },
        "product_reference": "webkit2gtk3-0:2.40.5-1.el9.src",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.3.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-32885",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2023-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2236842"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Memory corruption issue when processing web content",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is being rated as \u0027Moderate\u0027 as WebKitGTK package is shipped as a dependency for Gnome package, additionally Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32885"
        },
        {
          "category": "external",
          "summary": "RHBZ#2236842",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236842"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32885",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32885"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32885",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32885"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0003.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0003.html"
        }
      ],
      "release_date": "2023-04-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Memory corruption issue when processing web content"
    },
    {
      "cve": "CVE-2022-32919",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "discovery_date": "2024-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271437"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK and WPE WebKit that allows a remote attacker to conduct spoofing attacks by exploiting improper UI handling. This flaw enables attackers to create specially crafted websites that can display misleading information to users. By exploiting this vulnerability, an attacker can trick users into believing they are interacting with a legitimate website, potentially leading to a UI spoofing attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32919"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271437",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271437"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32919",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32919"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32919",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32919"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0010.html"
        }
      ],
      "release_date": "2023-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing."
    },
    {
      "cve": "CVE-2022-32933",
      "cwe": {
        "id": "CWE-841",
        "name": "Improper Enforcement of Behavioral Workflow"
      },
      "discovery_date": "2024-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271441"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk where a website may be able to track the websites a user visited in private browsing mode.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A website may able to track visited websites in private browsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32933"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271441",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271441"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32933",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32933"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32933",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32933"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0010.html"
        }
      ],
      "release_date": "2023-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A website may able to track visited websites in private browsing"
    },
    {
      "cve": "CVE-2022-46705",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2024-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271444"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This flaw allows a remote attacker to bypass security restrictions and spoof the user\u0027s address bar. This issue occurs when a victim is persuaded to access a specially crafted website due to improper handling of URLs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Visiting a malicious website may lead to address bar spoofing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46705"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271444",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271444"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46705",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46705"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46705",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46705"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0010.html"
        }
      ],
      "release_date": "2023-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Visiting a malicious website may lead to address bar spoofing"
    },
    {
      "cve": "CVE-2022-46725",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2024-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271446"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This flaw occurs due to an issue in the component URL Handler, which allows a remote attacker to manipulate an unknown input that can lead to clickjacking.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Visiting a malicious website may lead to address bar spoofing.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46725"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271446",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271446"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46725",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46725"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46725",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46725"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0010.html"
        }
      ],
      "release_date": "2023-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Visiting a malicious website may lead to address bar spoofing."
    },
    {
      "cve": "CVE-2023-27932",
      "cwe": {
        "id": "CWE-942",
        "name": "Permissive Cross-domain Policy with Untrusted Domains"
      },
      "discovery_date": "2023-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2236843"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may bypass the same-origin Policy.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Same Origin Policy bypass via crafted web content",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is being rated as \u0027Moderate\u0027 as WebKitGTK package is shipped as a dependency for Gnome package, additionally Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-27932"
        },
        {
          "category": "external",
          "summary": "RHBZ#2236843",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236843"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-27932",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-27932"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-27932",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27932"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0003.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0003.html"
        }
      ],
      "release_date": "2023-04-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Same Origin Policy bypass via crafted web content"
    },
    {
      "cve": "CVE-2023-27954",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2023-09-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2236844"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This security issue leads to tracking sensitive user information via a website.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Website may be able to track sensitive user information",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is being rated as \u0027Moderate\u0027 as WebKitGTK package is shipped as a dependency for Gnome package, additionally Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-27954"
        },
        {
          "category": "external",
          "summary": "RHBZ#2236844",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236844"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-27954",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-27954"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-27954",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27954"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0003.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0003.html"
        }
      ],
      "release_date": "2023-04-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Website may be able to track sensitive user information"
    },
    {
      "cve": "CVE-2023-28198",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-09-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2238943"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKit. When processing web content, it may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use after free vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is being rated as \u0027Moderate\u0027 as the WebKitGTK package is shipped as a dependency for the Gnome package. Additionally, Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-28198"
        },
        {
          "category": "external",
          "summary": "RHBZ#2238943",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238943"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-28198",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-28198"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28198",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28198"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0008.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0008.html"
        }
      ],
      "release_date": "2023-09-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: use after free vulnerability"
    },
    {
      "cve": "CVE-2023-32370",
      "discovery_date": "2023-09-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2238944"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkit. A logic issue was addressed with improved validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: content security policy blacklist failure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is rated as \u0027Moderate\u0027 as the WebKitGTK package is shipped as a dependency for the Gnome package. Additionally, Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-32370"
        },
        {
          "category": "external",
          "summary": "RHBZ#2238944",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238944"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-32370",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-32370"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-32370",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32370"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0008.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0008.html"
        }
      ],
      "release_date": "2023-09-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: content security policy blacklist failure"
    },
    {
      "cve": "CVE-2023-32393",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-07-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2224608"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-32393"
        },
        {
          "category": "external",
          "summary": "RHBZ#2224608",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224608"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-32393",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-32393"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-32393",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32393"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0006.html"
        }
      ],
      "release_date": "2023-07-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: arbitrary code execution"
    },
    {
      "cve": "CVE-2023-38133",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK, which exists due to excessive data output in WebKit Process Model. This issue occurs when processing malicious web content, which may lead to sensitive information disclosure to unauthorized attackers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: disclose sensitive information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38133"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231015"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38133",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38133"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38133",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38133"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: disclose sensitive information"
    },
    {
      "cve": "CVE-2023-38572",
      "cwe": {
        "id": "CWE-942",
        "name": "Permissive Cross-domain Policy with Untrusted Domains"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231028"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This flaw exists due to an error when handling the Same Origin Policy. A remote attacker can bypass Same Origin Policy restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: bypass Same Origin Policy",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38572"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231028",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231028"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38572",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38572"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38572",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38572"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: bypass Same Origin Policy"
    },
    {
      "cve": "CVE-2023-38592",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231017"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38592"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231017",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231017"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38592",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38592"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38592",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38592"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-38594",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231018"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38594"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231018",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231018"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38594",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38594"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38594",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38594"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: arbitrary code execution"
    },
    {
      "cve": "CVE-2023-38595",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231019"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38595"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231019",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231019"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38595",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38595"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38595",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38595"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: arbitrary code execution"
    },
    {
      "cve": "CVE-2023-38597",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231043"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231043",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231043"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38597"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: arbitrary code execution"
    },
    {
      "cve": "CVE-2023-38599",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK, which exists due to a logic issue in WebKit related to a user\u0027s privacy. A remote attacker may be able to track sensitive user information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: track sensitive user information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38599"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38599",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38599"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38599",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38599"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: track sensitive user information"
    },
    {
      "cve": "CVE-2023-38600",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231021"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38600"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231021",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231021"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38600",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38600"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38600",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38600"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: arbitrary code execution"
    },
    {
      "cve": "CVE-2023-38611",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-08-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2231022"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38611"
        },
        {
          "category": "external",
          "summary": "RHBZ#2231022",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2231022"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38611",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38611"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38611",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38611"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0007.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0007.html"
        }
      ],
      "release_date": "2023-08-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: arbitrary code execution"
    },
    {
      "cve": "CVE-2023-39434",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-09-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2241405"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in WebKitGTK. This issue could allow an attacker to cause memory corruption and execute Remote Code Execution. The victim needs to visit a malicious web page in order for a successful attack to be accomplished.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: processing web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-39434"
        },
        {
          "category": "external",
          "summary": "RHBZ#2241405",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241405"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-39434",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-39434"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39434",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39434"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0009.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0009.html"
        }
      ],
      "release_date": "2023-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: processing web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-40397",
      "cwe": {
        "id": "CWE-96",
        "name": "Improper Neutralization of Directives in Statically Saved Code (\u0027Static Code Injection\u0027)"
      },
      "discovery_date": "2023-09-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2238945"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: arbitrary javascript code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is being rated as \u0027Moderate\u0027 as WebKitGTK package is shipped as a dependency for Gnome package. Additionally, Red Hat Enterprise Linux doesn\u0027t ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-40397"
        },
        {
          "category": "external",
          "summary": "RHBZ#2238945",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2238945"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-40397",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40397"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-40397",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40397"
        },
        {
          "category": "external",
          "summary": "https://wpewebkit.org/security/WSA-2023-0008.html",
          "url": "https://wpewebkit.org/security/WSA-2023-0008.html"
        }
      ],
      "release_date": "2023-09-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: arbitrary javascript code execution"
    },
    {
      "cve": "CVE-2023-40451",
      "discovery_date": "2023-09-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2241409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. An attacker may be able to execute JavaScript code to trigger Remote Code Execution,  resulting in a high impact on data confidentiality, integrity, and system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-40451"
        },
        {
          "category": "external",
          "summary": "RHBZ#2241409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-40451",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40451"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-40451",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40451"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0009.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0009.html"
        }
      ],
      "release_date": "2023-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code"
    },
    {
      "cve": "CVE-2023-42833",
      "discovery_date": "2024-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2270146"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This flaw allows a remote attacker to trigger arbitrary code execution by persuading a victim to visit a specially crafted website.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important because it affects the confidentiality, integrity, and availability (CIA) of systems, with a high severity rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
          "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
          "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-42833"
        },
        {
          "category": "external",
          "summary": "RHBZ#2270146",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270146"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-42833",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-42833"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42833",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42833"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0001.html"
        }
      ],
      "release_date": "2024-02-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-11-07T08:48:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:6535"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.src",
            "AppStream-9.3.0.GA:webkit2gtk3-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-debugsource-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-devel-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-debuginfo-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-0:2.40.5-1.el9.x86_64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.aarch64",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.i686",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.ppc64le",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.s390x",
            "AppStream-9.3.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.40.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing web content may lead to arbitrary code execution"
    }
  ]
}

CVE-2023-27954 (GCVE-0-2023-27954)

Vulnerability from cvelistv5

Published

2023-05-08 00:00

Modified

2025-01-29 14:56

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

A website may be able to track sensitive user information

Summary

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information.

References

URL

Tags

	https://support.apple.com/en-us/HT213670
	https://support.apple.com/en-us/HT213671
	https://support.apple.com/en-us/HT213676
	https://support.apple.com/en-us/HT213678
	https://support.apple.com/en-us/HT213674
	https://support.apple.com/en-us/HT213673

Impacted products

Vendor

Product

Version

Apple

macOS

Version: unspecified < 13.3

Apple	Safari	Version: unspecified < 16.4
Apple	iOS and iPadOS	Version: unspecified < 16.4
Apple	watchOS	Version: unspecified < 9.4
Apple	tvOS	Version: unspecified < 16.4
Apple	iOS and iPadOS	Version: unspecified < 15.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T12:23:30.566Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213670"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213671"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213676"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213678"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213674"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213673"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-27954",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T14:52:16.559919Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-29T14:56:24.330Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A website may be able to track sensitive user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-27T03:46:16.282Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213670"
        },
        {
          "url": "https://support.apple.com/en-us/HT213671"
        },
        {
          "url": "https://support.apple.com/en-us/HT213676"
        },
        {
          "url": "https://support.apple.com/en-us/HT213678"
        },
        {
          "url": "https://support.apple.com/en-us/HT213674"
        },
        {
          "url": "https://support.apple.com/en-us/HT213673"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-27954",
    "datePublished": "2023-05-08T00:00:00.000Z",
    "dateReserved": "2023-03-08T00:00:00.000Z",
    "dateUpdated": "2025-01-29T14:56:24.330Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-40451 (GCVE-0-2023-40451)

Vulnerability from cvelistv5

Published

2023-09-26 20:14

Modified

2025-02-13 17:08

Severity ?

CWE

An attacker with JavaScript execution may be able to execute arbitrary code

Summary

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

References

URL

Tags

	https://support.apple.com/en-us/HT213941
	http://www.openwall.com/lists/oss-security/2023/09/28/3
	http://seclists.org/fulldisclosure/2023/Oct/2
	https://security.gentoo.org/glsa/202401-33

Impacted products

	Vendor	Product	Version
	Apple	Safari	Version: unspecified < 17

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-29T13:17:26.800Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213941"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2023/Oct/2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-33"
          },
          {
            "url": "https://webkitgtk.org/security/WSA-2023-0009.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-40451",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-01T19:54:23.789025Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T18:34:05.685Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker with JavaScript execution may be able to execute arbitrary code",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-31T15:06:38.133Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213941"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
        },
        {
          "url": "http://seclists.org/fulldisclosure/2023/Oct/2"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-33"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-40451",
    "datePublished": "2023-09-26T20:14:38.617Z",
    "dateReserved": "2023-08-14T20:26:36.268Z",
    "dateUpdated": "2025-02-13T17:08:21.083Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38611 (GCVE-0-2023-38611)

Vulnerability from cvelistv5

Published

2023-07-27 00:22

Modified

2025-02-13 17:02

Severity ?

CWE

Processing web content may lead to arbitrary code execution

Summary

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213847
	https://support.apple.com/en-us/HT213846
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213848
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

Safari

Version: unspecified < 16.6

Apple	tvOS	Version: unspecified < 16.6
Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	watchOS	Version: unspecified < 9.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.334Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213847"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213846"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:50.703Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213847"
        },
        {
          "url": "https://support.apple.com/en-us/HT213846"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213848"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38611",
    "datePublished": "2023-07-27T00:22:12.030Z",
    "dateReserved": "2023-07-20T15:04:44.409Z",
    "dateUpdated": "2025-02-13T17:02:06.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-39434 (GCVE-0-2023-39434)

Vulnerability from cvelistv5

Published

2023-09-26 20:14

Modified

2025-05-02 17:46

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing web content may lead to arbitrary code execution

Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213938
	https://support.apple.com/en-us/HT213940
	https://support.apple.com/en-us/HT213937
	http://www.openwall.com/lists/oss-security/2023/09/28/3
	http://seclists.org/fulldisclosure/2023/Oct/8
	http://seclists.org/fulldisclosure/2023/Oct/9
	http://seclists.org/fulldisclosure/2023/Oct/3
	https://security.gentoo.org/glsa/202401-33

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 17

	Apple	macOS	Version: unspecified < 14
	Apple	watchOS	Version: unspecified < 10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-29T13:17:26.280Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213938"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213940"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213937"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2023/Oct/8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2023/Oct/9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2023/Oct/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-33"
          },
          {
            "url": "https://webkitgtk.org/security/WSA-2023-0009.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-39434",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:26:40.911919Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-02T17:46:48.633Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "10",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-31T15:06:22.265Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213938"
        },
        {
          "url": "https://support.apple.com/en-us/HT213940"
        },
        {
          "url": "https://support.apple.com/en-us/HT213937"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
        },
        {
          "url": "http://seclists.org/fulldisclosure/2023/Oct/8"
        },
        {
          "url": "http://seclists.org/fulldisclosure/2023/Oct/9"
        },
        {
          "url": "http://seclists.org/fulldisclosure/2023/Oct/3"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-33"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-39434",
    "datePublished": "2023-09-26T20:14:45.109Z",
    "dateReserved": "2023-09-14T19:03:36.093Z",
    "dateUpdated": "2025-05-02T17:46:48.633Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38600 (GCVE-0-2023-38600)

Vulnerability from cvelistv5

Published

2023-07-27 00:22

Modified

2025-05-05 15:56

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing web content may lead to arbitrary code execution

Summary

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213847
	https://support.apple.com/en-us/HT213846
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213848
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

Safari

Version: unspecified < 16.6

Apple	tvOS	Version: unspecified < 16.6
Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	watchOS	Version: unspecified < 9.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.334Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213847"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213846"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-38600",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:27:35.928163Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T15:56:19.895Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:32.456Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213847"
        },
        {
          "url": "https://support.apple.com/en-us/HT213846"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213848"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38600",
    "datePublished": "2023-07-27T00:22:21.257Z",
    "dateReserved": "2023-07-20T15:04:44.408Z",
    "dateUpdated": "2025-05-05T15:56:19.895Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38592 (GCVE-0-2023-38592)

Vulnerability from cvelistv5

Published

2023-07-28 04:30

Modified

2025-02-13 17:01

Severity ?

CWE

Processing web content may lead to arbitrary code execution

Summary

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, tvOS 16.6, macOS Ventura 13.5. Processing web content may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213846
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213848
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

tvOS

Version: unspecified < 16.6

Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	watchOS	Version: unspecified < 9.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.446Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213846"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, tvOS 16.6, macOS Ventura 13.5. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:52.616Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213846"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213848"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38592",
    "datePublished": "2023-07-28T04:30:42.372Z",
    "dateReserved": "2023-07-20T15:04:44.407Z",
    "dateUpdated": "2025-02-13T17:01:58.647Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32393 (GCVE-0-2023-32393)

Vulnerability from cvelistv5

Published

2023-07-27 00:30

Modified

2025-02-13 16:50

Severity ?

CWE

Processing web content may lead to arbitrary code execution

Summary

The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing web content may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213606
	https://support.apple.com/en-us/HT213601
	https://support.apple.com/en-us/HT213605
	https://support.apple.com/en-us/HT213599
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 16.3

Apple	tvOS	Version: unspecified < 16.3
Apple	macOS	Version: unspecified < 13.2
Apple	watchOS	Version: unspecified < 9.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:18:36.249Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213606"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213601"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213605"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213599"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:30.799Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213606"
        },
        {
          "url": "https://support.apple.com/en-us/HT213601"
        },
        {
          "url": "https://support.apple.com/en-us/HT213605"
        },
        {
          "url": "https://support.apple.com/en-us/HT213599"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-32393",
    "datePublished": "2023-07-27T00:30:58.100Z",
    "dateReserved": "2023-05-08T22:31:41.823Z",
    "dateUpdated": "2025-02-13T16:50:57.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38595 (GCVE-0-2023-38595)

Vulnerability from cvelistv5

Published

2023-07-27 00:31

Modified

2025-02-13 17:02

Severity ?

CWE

Processing web content may lead to arbitrary code execution

Summary

References

URL

Tags

	https://support.apple.com/en-us/HT213847
	https://support.apple.com/en-us/HT213846
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213848
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

Safari

Version: unspecified < 16.6

Apple	tvOS	Version: unspecified < 16.6
Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	watchOS	Version: unspecified < 9.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.461Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213847"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213846"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:34.462Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213847"
        },
        {
          "url": "https://support.apple.com/en-us/HT213846"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213848"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38595",
    "datePublished": "2023-07-27T00:31:30.328Z",
    "dateReserved": "2023-07-20T15:04:44.407Z",
    "dateUpdated": "2025-02-13T17:02:00.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-32885 (GCVE-0-2022-32885)

Vulnerability from cvelistv5

Published

2023-05-08 00:00

Modified

2025-01-29 16:20

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing maliciously crafted web content may lead to arbitrary code execution

Summary

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution

References

URL

Tags

	https://support.apple.com/en-us/HT213345
	https://support.apple.com/en-us/HT213346
	https://support.apple.com/en-us/HT213341

Impacted products

Vendor

Product

Version

Apple

macOS

Version: unspecified < 12.5

	Apple	macOS	Version: unspecified < 15.6
	Apple	macOS	Version: unspecified < 15.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:54:03.009Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213345"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213346"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213341"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-32885",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T16:20:34.535358Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-29T16:20:44.138Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to arbitrary code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-27T00:00:00.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213345"
        },
        {
          "url": "https://support.apple.com/en-us/HT213346"
        },
        {
          "url": "https://support.apple.com/en-us/HT213341"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-32885",
    "datePublished": "2023-05-08T00:00:00.000Z",
    "dateReserved": "2022-06-09T00:00:00.000Z",
    "dateUpdated": "2025-01-29T16:20:44.138Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32370 (GCVE-0-2023-32370)

Vulnerability from cvelistv5

Published

2023-09-06 01:36

Modified

2025-02-13 16:50

Severity ?

CWE

Content Security Policy to block domains with wildcards may fail

Summary

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.

References

URL

Tags

	https://support.apple.com/en-us/HT213670
	http://www.openwall.com/lists/oss-security/2023/09/11/1
	https://security.gentoo.org/glsa/202401-04

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 13.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:24.917Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213670"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/11/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-32370",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-30T18:17:38.085978Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-30T18:17:49.178Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Content Security Policy to block domains with wildcards may fail",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:38.307Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213670"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/11/1"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-32370",
    "datePublished": "2023-09-06T01:36:31.884Z",
    "dateReserved": "2023-05-08T22:31:41.818Z",
    "dateUpdated": "2025-02-13T16:50:38.290Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-28198 (GCVE-0-2023-28198)

Vulnerability from cvelistv5

Published

2023-08-14 22:40

Modified

2025-02-13 16:48

Severity ?

CWE

Processing web content may lead to arbitrary code execution

Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213670
	https://support.apple.com/en-us/HT213676
	http://www.openwall.com/lists/oss-security/2023/09/11/1
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

macOS

Version: unspecified < 13.3

Apple

iOS and iPadOS

Version: unspecified < 16.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T12:30:24.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213670"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213676"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/11/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:22.923Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213670"
        },
        {
          "url": "https://support.apple.com/en-us/HT213676"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/11/1"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-28198",
    "datePublished": "2023-08-14T22:40:37.966Z",
    "dateReserved": "2023-03-13T18:37:25.757Z",
    "dateUpdated": "2025-02-13T16:48:32.183Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-32919 (GCVE-0-2022-32919)

Vulnerability from cvelistv5

Published

2024-01-10 22:03

Modified

2025-06-17 17:21

Severity ?

4.7 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

CWE

Visiting a website that frames malicious content may lead to UI spoofing

Summary

The issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Visiting a website that frames malicious content may lead to UI spoofing.

References

URL

Tags

	https://support.apple.com/en-us/HT213532
	https://support.apple.com/en-us/HT213530

Impacted products

Vendor

Product

Version

Apple

macOS

Version: unspecified < 13.1

Apple

iOS and iPadOS

Version: unspecified < 16.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:54:03.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213532"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213530"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-32919",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-21T19:33:43.728370Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1021",
                "description": "CWE-1021 Improper Restriction of Rendered UI Layers or Frames",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-17T17:21:26.745Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Visiting a website that frames malicious content may lead to UI spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a website that frames malicious content may lead to UI spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-10T22:03:46.841Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213532"
        },
        {
          "url": "https://support.apple.com/en-us/HT213530"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-32919",
    "datePublished": "2024-01-10T22:03:46.841Z",
    "dateReserved": "2022-06-09T18:33:49.501Z",
    "dateUpdated": "2025-06-17T17:21:26.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38599 (GCVE-0-2023-38599)

Vulnerability from cvelistv5

Published

2023-07-28 04:30

Modified

2025-02-13 17:02

Severity ?

CWE

A website may be able to track sensitive user information

Summary

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information.

References

URL

Tags

	https://support.apple.com/en-us/HT213847
	https://support.apple.com/en-us/HT213846
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213842
	https://support.apple.com/en-us/HT213848
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

Safari

Version: unspecified < 16.6

Apple	tvOS	Version: unspecified < 16.6
Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	iOS and iPadOS	Version: unspecified < 15.7
Apple	watchOS	Version: unspecified < 9.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.523Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213847"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213846"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213842"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A website may be able to track sensitive user information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:36.394Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213847"
        },
        {
          "url": "https://support.apple.com/en-us/HT213846"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213842"
        },
        {
          "url": "https://support.apple.com/en-us/HT213848"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38599",
    "datePublished": "2023-07-28T04:30:43.299Z",
    "dateReserved": "2023-07-20T15:04:44.407Z",
    "dateUpdated": "2025-02-13T17:02:02.971Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-27932 (GCVE-0-2023-27932)

Vulnerability from cvelistv5

Published

2023-05-08 00:00

Modified

2025-01-29 20:17

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

Processing maliciously crafted web content may bypass Same Origin Policy

Summary

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy.

References

URL

Tags

	https://support.apple.com/en-us/HT213670
	https://support.apple.com/en-us/HT213671
	https://support.apple.com/en-us/HT213676
	https://support.apple.com/en-us/HT213678
	https://support.apple.com/en-us/HT213674

Impacted products

Vendor

Product

Version

Apple

macOS

Version: unspecified < 13.3

Apple	Safari	Version: unspecified < 16.4
Apple	iOS and iPadOS	Version: unspecified < 16.4
Apple	watchOS	Version: unspecified < 9.4
Apple	tvOS	Version: unspecified < 16.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T12:23:30.578Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213670"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213671"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213676"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213678"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213674"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-27932",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T20:17:35.661118Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-346",
                "description": "CWE-346 Origin Validation Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-29T20:17:39.339Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may bypass Same Origin Policy",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-27T03:47:33.238Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213670"
        },
        {
          "url": "https://support.apple.com/en-us/HT213671"
        },
        {
          "url": "https://support.apple.com/en-us/HT213676"
        },
        {
          "url": "https://support.apple.com/en-us/HT213678"
        },
        {
          "url": "https://support.apple.com/en-us/HT213674"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-27932",
    "datePublished": "2023-05-08T00:00:00.000Z",
    "dateReserved": "2023-03-08T00:00:00.000Z",
    "dateUpdated": "2025-01-29T20:17:39.339Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-42833 (GCVE-0-2023-42833)

Vulnerability from cvelistv5

Published

2024-01-10 22:03

Modified

2025-06-11 16:47

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing web content may lead to arbitrary code execution

Summary

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. Processing web content may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213938
	https://support.apple.com/en-us/HT213941
	https://support.apple.com/en-us/HT213940
	http://www.openwall.com/lists/oss-security/2024/02/05/8

Impacted products

Vendor

Product

Version

Apple

iOS and iPadOS

Version: unspecified < 17

	Apple	Safari	Version: unspecified < 17
	Apple	macOS	Version: unspecified < 14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:30:24.637Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213938"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213941"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213940"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/02/05/8"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-42833",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T19:20:09.099533Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-11T16:47:17.590Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-06T01:06:01.729Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213938"
        },
        {
          "url": "https://support.apple.com/en-us/HT213941"
        },
        {
          "url": "https://support.apple.com/en-us/HT213940"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2024/02/05/8"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-42833",
    "datePublished": "2024-01-10T22:03:47.742Z",
    "dateReserved": "2023-09-14T19:05:11.448Z",
    "dateUpdated": "2025-06-11T16:47:17.590Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-32933 (GCVE-0-2022-32933)

Vulnerability from cvelistv5

Published

2024-06-10 19:21

Modified

2025-03-18 15:24

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

A website may be able to track the websites a user visited in Safari private browsing mode

Summary

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.5. A website may be able to track the websites a user visited in Safari private browsing mode.

References

URL

Tags

https://support.apple.com/en-us/HT213345

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 12.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-32933",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-12T14:46:18.369532Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T15:24:33.267Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T07:54:03.391Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213345"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.5. A website may be able to track the websites a user visited in Safari private browsing mode."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A website may be able to track the websites a user visited in Safari private browsing mode",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-10T19:21:22.941Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213345"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-32933",
    "datePublished": "2024-06-10T19:21:22.941Z",
    "dateReserved": "2022-06-09T18:33:49.531Z",
    "dateUpdated": "2025-03-18T15:24:33.267Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38597 (GCVE-0-2023-38597)

Vulnerability from cvelistv5

Published

2023-07-26 23:55

Modified

2025-02-13 17:02

Severity ?

CWE

Processing web content may lead to arbitrary code execution

Summary

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, Safari 16.6. Processing web content may lead to arbitrary code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213847
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213842
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

Safari

Version: unspecified < 16.6

Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	iOS and iPadOS	Version: unspecified < 15.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.067Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213847"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213842"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, Safari 16.6. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:26.607Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213847"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213842"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38597",
    "datePublished": "2023-07-26T23:55:02.370Z",
    "dateReserved": "2023-07-20T15:04:44.407Z",
    "dateUpdated": "2025-02-13T17:02:01.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38133 (GCVE-0-2023-38133)

Vulnerability from cvelistv5

Published

2023-07-26 23:42

Modified

2025-02-13 17:01

Severity ?

CWE

Processing web content may disclose sensitive information

Summary

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may disclose sensitive information.

References

URL

Tags

	https://support.apple.com/en-us/HT213847
	https://support.apple.com/en-us/HT213846
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213842
	https://support.apple.com/en-us/HT213848
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

Safari

Version: unspecified < 16.6

Apple	tvOS	Version: unspecified < 16.6
Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	iOS and iPadOS	Version: unspecified < 15.7
Apple	watchOS	Version: unspecified < 9.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:30:14.050Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213847"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213846"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213842"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may disclose sensitive information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may disclose sensitive information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:54.449Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213847"
        },
        {
          "url": "https://support.apple.com/en-us/HT213846"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213842"
        },
        {
          "url": "https://support.apple.com/en-us/HT213848"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38133",
    "datePublished": "2023-07-26T23:42:26.023Z",
    "dateReserved": "2023-07-20T15:04:15.856Z",
    "dateUpdated": "2025-02-13T17:01:46.326Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-46705 (GCVE-0-2022-46705)

Vulnerability from cvelistv5

Published

2023-02-27 00:00

Modified

2024-08-03 14:39

Severity ?

CWE

Visiting a malicious website may lead to address bar spoofing

Summary

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.

References

URL

Tags

	https://support.apple.com/kb/HT213531
	https://support.apple.com/kb/HT213536
	https://support.apple.com/kb/HT213535
	https://support.apple.com/en-us/HT213532
	https://support.apple.com/en-us/HT213530
	https://support.apple.com/en-us/HT213537
	https://support.apple.com/kb/HT213676
	http://www.openwall.com/lists/oss-security/2023/11/15/1	mailing-list

Impacted products

Vendor

Product

Version

Apple

macOS

Version: unspecified < 13.1

	Apple	macOS	Version: unspecified < 16.2
	Apple	macOS	Version: unspecified < 16.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:39:38.239Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213531"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213536"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213535"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213532"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213530"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213537"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213676"
          },
          {
            "name": "[oss-security] 20231115 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0010",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/11/15/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a malicious website may lead to address bar spoofing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-15T21:06:16.893140",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/kb/HT213531"
        },
        {
          "url": "https://support.apple.com/kb/HT213536"
        },
        {
          "url": "https://support.apple.com/kb/HT213535"
        },
        {
          "url": "https://support.apple.com/en-us/HT213532"
        },
        {
          "url": "https://support.apple.com/en-us/HT213530"
        },
        {
          "url": "https://support.apple.com/en-us/HT213537"
        },
        {
          "url": "https://support.apple.com/kb/HT213676"
        },
        {
          "name": "[oss-security] 20231115 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0010",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/11/15/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-46705",
    "datePublished": "2023-02-27T00:00:00",
    "dateReserved": "2022-12-07T00:00:00",
    "dateUpdated": "2024-08-03T14:39:38.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38572 (GCVE-0-2023-38572)

Vulnerability from cvelistv5

Published

2023-07-27 00:22

Modified

2025-02-13 17:01

Severity ?

CWE

A website may be able to bypass Same Origin Policy

Summary

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. A website may be able to bypass Same Origin Policy.

References

URL

Tags

	https://support.apple.com/en-us/HT213847
	https://support.apple.com/en-us/HT213846
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213842
	https://support.apple.com/en-us/HT213848
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

Safari

Version: unspecified < 16.6

Apple	tvOS	Version: unspecified < 16.6
Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	iOS and iPadOS	Version: unspecified < 15.7
Apple	watchOS	Version: unspecified < 9.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.567Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213847"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213846"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213842"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. A website may be able to bypass Same Origin Policy."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A website may be able to bypass Same Origin Policy",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:20.725Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213847"
        },
        {
          "url": "https://support.apple.com/en-us/HT213846"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213842"
        },
        {
          "url": "https://support.apple.com/en-us/HT213848"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38572",
    "datePublished": "2023-07-27T00:22:27.903Z",
    "dateReserved": "2023-07-20T15:04:25.828Z",
    "dateUpdated": "2025-02-13T17:01:55.750Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-40397 (GCVE-0-2023-40397)

Vulnerability from cvelistv5

Published

2023-09-06 20:48

Modified

2025-02-13 17:07

Severity ?

CWE

A remote attacker may be able to cause arbitrary javascript code execution

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution.

References

URL

Tags

	https://support.apple.com/en-us/HT213843
	http://www.openwall.com/lists/oss-security/2023/09/11/1
	https://security.gentoo.org/glsa/202401-04

Impacted products

	Vendor	Product	Version
	Apple	macOS	Version: unspecified < 13.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T18:31:53.770Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/11/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote attacker may be able to cause arbitrary javascript code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:45.711Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/11/1"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-40397",
    "datePublished": "2023-09-06T20:48:06.383Z",
    "dateReserved": "2023-08-14T20:26:36.254Z",
    "dateUpdated": "2025-02-13T17:07:51.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-46725 (GCVE-0-2022-46725)

Vulnerability from cvelistv5

Published

2023-08-14 22:40

Modified

2025-02-13 16:33

Severity ?

CWE

Visiting a malicious website may lead to address bar spoofing

Summary

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.

References

URL

Tags

	https://support.apple.com/en-us/HT213676
	http://www.openwall.com/lists/oss-security/2023/11/15/1

Impacted products

	Vendor	Product	Version
	Apple	iOS and iPadOS	Version: unspecified < 16.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:39:38.477Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213676"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/11/15/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Visiting a malicious website may lead to address bar spoofing",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-15T21:06:19.575Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213676"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/11/15/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-46725",
    "datePublished": "2023-08-14T22:40:31.532Z",
    "dateReserved": "2022-12-07T00:55:31.833Z",
    "dateUpdated": "2025-02-13T16:33:52.476Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-38594 (GCVE-0-2023-38594)

Vulnerability from cvelistv5

Published

2023-07-26 23:46

Modified

2025-02-13 17:01

Severity ?

CWE

Processing web content may lead to arbitrary code execution

Summary

References

URL

Tags

	https://support.apple.com/en-us/HT213847
	https://support.apple.com/en-us/HT213846
	https://support.apple.com/en-us/HT213841
	https://support.apple.com/en-us/HT213843
	https://support.apple.com/en-us/HT213842
	https://support.apple.com/en-us/HT213848
	http://www.openwall.com/lists/oss-security/2023/08/02/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
	https://www.debian.org/security/2023/dsa-5468
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
	https://security.gentoo.org/glsa/202401-04

Impacted products

Vendor

Product

Version

Apple

Safari

Version: unspecified < 16.6

Apple	tvOS	Version: unspecified < 16.6
Apple	iOS and iPadOS	Version: unspecified < 16.6
Apple	macOS	Version: unspecified < 13.5
Apple	iOS and iPadOS	Version: unspecified < 15.7
Apple	watchOS	Version: unspecified < 9.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:46:56.394Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213847"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213846"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213843"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213842"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213848"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5468"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing web content may lead to arbitrary code execution",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-05T14:06:43.712Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213847"
        },
        {
          "url": "https://support.apple.com/en-us/HT213846"
        },
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/en-us/HT213843"
        },
        {
          "url": "https://support.apple.com/en-us/HT213842"
        },
        {
          "url": "https://support.apple.com/en-us/HT213848"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/08/02/1"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5468"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-04"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-38594",
    "datePublished": "2023-07-26T23:46:22.932Z",
    "dateReserved": "2023-07-20T15:04:44.407Z",
    "dateUpdated": "2025-02-13T17:01:59.876Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2023_6535

Vulnerability from csaf_redhat

CVE-2023-27954 (GCVE-0-2023-27954)

Vulnerability from cvelistv5

CVE-2023-40451 (GCVE-0-2023-40451)

Vulnerability from cvelistv5

CVE-2023-38611 (GCVE-0-2023-38611)

Vulnerability from cvelistv5

CVE-2023-39434 (GCVE-0-2023-39434)

Vulnerability from cvelistv5

CVE-2023-38600 (GCVE-0-2023-38600)

Vulnerability from cvelistv5

CVE-2023-38592 (GCVE-0-2023-38592)

Vulnerability from cvelistv5

CVE-2023-32393 (GCVE-0-2023-32393)

Vulnerability from cvelistv5

CVE-2023-38595 (GCVE-0-2023-38595)

Vulnerability from cvelistv5

CVE-2022-32885 (GCVE-0-2022-32885)

Vulnerability from cvelistv5

CVE-2023-32370 (GCVE-0-2023-32370)

Vulnerability from cvelistv5

CVE-2023-28198 (GCVE-0-2023-28198)

Vulnerability from cvelistv5

CVE-2022-32919 (GCVE-0-2022-32919)

Vulnerability from cvelistv5

CVE-2023-38599 (GCVE-0-2023-38599)

Vulnerability from cvelistv5

CVE-2023-27932 (GCVE-0-2023-27932)

Vulnerability from cvelistv5

CVE-2023-42833 (GCVE-0-2023-42833)

Vulnerability from cvelistv5

CVE-2022-32933 (GCVE-0-2022-32933)

Vulnerability from cvelistv5

CVE-2023-38597 (GCVE-0-2023-38597)

Vulnerability from cvelistv5

CVE-2023-38133 (GCVE-0-2023-38133)

Vulnerability from cvelistv5

CVE-2022-46705 (GCVE-0-2022-46705)

Vulnerability from cvelistv5

CVE-2023-38572 (GCVE-0-2023-38572)

Vulnerability from cvelistv5

CVE-2023-40397 (GCVE-0-2023-40397)

Vulnerability from cvelistv5

CVE-2022-46725 (GCVE-0-2022-46725)

Vulnerability from cvelistv5

CVE-2023-38594 (GCVE-0-2023-38594)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature