CVE-2024-23280
Fixed in a distro release EPSS 1%CVSS 7.5
An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may be able to fingerprint the user.
Products: apple safari, Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple watchOS, Apple iOS, apple ipados
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | webkit2gtk | 2.44.1-1~deb11u1 |
| Debian 12 | webkit2gtk | 2.44.1-1~deb12u1 |
| Debian 12 | wpewebkit | no fix |
| Debian 13 | webkit2gtk | 2.44.0-1 |
| Debian 13 | wpewebkit | 2.44.1-1 |
| Debian 14 | webkit2gtk | 2.44.0-1 |
| Debian 14 | wpewebkit | 2.44.1-1 |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debuginfo | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debugsource | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel-debuginfo | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-debuginfo | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.46.3-2.el8_10 |
| Red Hat Enterprise Linux 9 | webkit2gtk3 | 0:2.46.1-2.el9_4 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debuginfo | 0:2.46.1-2.el9_4 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debugsource | 0:2.46.1-2.el9_4 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel | 0:2.46.1-2.el9_4 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel-debuginfo | 0:2.46.1-2.el9_4 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc | 0:2.46.1-2.el9_4 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-debuginfo | 0:2.46.1-2.el9_4 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel | 0:2.46.1-2.el9_4 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel-debuginfo | 0:2.46.1-2.el9_4 |
| Red Hat rhel els 7 | webkitgtk4 | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-debuginfo | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-devel | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-doc | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-jsc | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-jsc-devel | 0:2.48.3-2.el7_9 |
| SUSE Enterprise Storage 7.1 | webkit2gtk3 | 2.44.0-150200.107.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | webkit2gtk3 | 2.44.0-150200.107.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | webkit2gtk3 | 2.44.0-150200.107.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3-soup2 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk4 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3-soup2 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk4 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | webkit2gtk3-soup2 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | webkit2gtk3-soup2 | 2.44.2-150600.12.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | webkit2gtk4 | 2.44.2-150600.12.3.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP5 | webkit2gtk3 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP6 | webkit2gtk3 | 2.44.2-150600.12.3.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 | webkit2gtk4 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | webkit2gtk4 | 2.44.2-150600.12.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | webkit2gtk3 | 2.44.2-4.7.1 |
| SUSE Linux Enterprise Server 12 SP5 | webkit2gtk3 | 2.44.0-4.3.2 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | webkit2gtk3 | 2.44.0-150200.107.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | webkit2gtk3 | 2.44.0-150200.107.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3-soup2 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk4 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | webkit2gtk3 | 2.44.0-4.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | webkit2gtk3 | 2.44.2-4.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | webkit2gtk3 | 2.44.0-150200.107.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | webkit2gtk3 | 2.44.0-150200.107.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3-soup2 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk4 | 2.44.0-150400.4.78.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | webkit2gtk3 | 2.44.2-4.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | webkit2gtk3 | 2.44.0-4.3.2 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | webkit2gtk3 | 2.44.2-4.7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | webkit2gtk3 | 2.44.0-4.3.2 |
| SUSE Manager Proxy 4.3 | webkit2gtk3-soup2 | 2.44.0-150400.4.78.1 |
| SUSE Manager Server 4.3 | webkit2gtk3-soup2 | 2.44.0-150400.4.78.1 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| Ubuntu 18.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 18.04 LTS | qtwebkit-source | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | no fix |
| Ubuntu 18.04 LTS | webkitgtk | no fix |
| Ubuntu 20.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 20.04 LTS | webkit2gtk | no fix |
| Ubuntu 20.04 LTS | wpewebkit | no fix |
| Ubuntu 22.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 22.04 LTS | webkit2gtk | 2.44.0-0ubuntu0.22.04.1 |
| Ubuntu 22.04 LTS | wpewebkit | no fix |
| Ubuntu 24.04 LTS | qtwebkit-opensource-src | no fix |
| openSUSE Leap 15.5 | webkit2gtk3 | 2.44.0-150400.4.78.1 |
| openSUSE Leap 15.5 | webkit2gtk3-soup2 | 2.44.0-150400.4.78.1 |
| openSUSE Leap 15.5 | webkit2gtk4 | 2.44.0-150400.4.78.1 |
| openSUSE Leap 15.6 | webkit2gtk3 | 2.44.2-150600.12.3.1 |
| openSUSE Leap 15.6 | webkit2gtk3-soup2 | 2.44.2-150600.12.3.1 |
| openSUSE Leap 15.6 | webkit2gtk4 | 2.44.2-150600.12.3.1 |