High ยท published March 7, 2023
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 75.0th percentile for exploit probability.
๐จ A crafty web content flaw in WebKit can lead to arbitrary code execution, and it's already been exploited! ๐ฅ Think of it like a restaurant that accepts any dish order without checking the recipe โ if someone sneaks in a dangerous ingredient, it can ruin everything! In this case, malicious web content is that sneaky ingredient. An attacker could harness this vulnerability to run arbitrary code on your system, potentially taking control of your device or stealing sensitive information. The consequences could be absolutely devastating if left unaddressed, as they can compromise your entire browser experience.
Think of it like a restaurant that accepts any dish order without checking the recipe โ if someone sneaks in a dangerous ingredient, it can ruin everything! In this case, malicious web content is that sneaky ingredient. This vulnerability in WebKit arises from improper memory handling when processing crafted web content, leading to multiple memory corruption issues. Essentially, it allows hackers to execute code remotely, bypassing security measures.
An attacker could harness this vulnerability to run arbitrary code on your system, potentially taking control of your device or stealing sensitive information. The consequences could be absolutely devastating if left unaddressed, as they can compromise your entire browser experience. Immediately update your WebKit to the latest secure version to patch this vulnerability, and educate users to avoid suspicious links. Regular security audits can also help identify potential weaknesses in your browser settings. You've got this! Following these steps will keep your data secure and your browsing safe. ๐ก๏ธ
| Product | Versions | Fixed in |
|---|---|---|
| webkitgtk/webkitgtk | < 2.26.0 | 2.26.0 |
| wpewebkit/wpe_webkit | < 2.26.0 | 2.26.0 |
| redhat/codeready_linux_builder | all versions | โ |
| redhat/codeready_linux_builder_eus | all versions | โ |
| redhat/codeready_linux_builder_eus | all versions | โ |
| redhat/codeready_linux_builder_for_arm64_eus | all versions | โ |
| redhat/codeready_linux_builder_for_arm64_eus | all versions | โ |
| redhat/codeready_linux_builder_for_arm64_eus | all versions | โ |
| redhat/codeready_linux_builder_for_ibm_z_systems_eus | all versions | โ |
| redhat/codeready_linux_builder_for_ibm_z_systems_eus | all versions | โ |
| redhat/codeready_linux_builder_for_ibm_z_systems_eus | all versions | โ |
| redhat/codeready_linux_builder_for_power_little_endian_eus | all versions | โ |
| redhat/codeready_linux_builder_for_power_little_endian_eus | all versions | โ |
| redhat/codeready_linux_builder_for_power_little_endian_eus | all versions | โ |
| redhat/enterprise_linux | all versions | โ |
| redhat/enterprise_linux_desktop | all versions | โ |
| redhat/enterprise_linux_eus | all versions | โ |
| redhat/enterprise_linux_eus | all versions | โ |
| redhat/enterprise_linux_eus | all versions | โ |
| redhat/enterprise_linux_eus | all versions | โ |
| redhat/enterprise_linux_for_arm64_eus | all versions | โ |
| redhat/enterprise_linux_for_ibm_z_systems | all versions | โ |
| redhat/enterprise_linux_for_ibm_z_systems | all versions | โ |
| redhat/enterprise_linux_for_ibm_z_systems_eus | all versions | โ |
| redhat/enterprise_linux_for_ibm_z_systems_eus | all versions | โ |
| redhat/enterprise_linux_for_power_big_endian | all versions | โ |
| redhat/enterprise_linux_for_power_little_endian | all versions | โ |
| redhat/enterprise_linux_for_power_little_endian | all versions | โ |
| redhat/enterprise_linux_for_power_little_endian_eus | all versions | โ |
| redhat/enterprise_linux_for_power_little_endian_eus | all versions | โ |
| redhat/enterprise_linux_for_scientific_computing | all versions | โ |
| redhat/enterprise_linux_server | all versions | โ |
| redhat/enterprise_linux_server_aus | all versions | โ |
| redhat/enterprise_linux_server_aus | all versions | โ |
| redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | all versions | โ |
| redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | all versions | โ |
| redhat/enterprise_linux_server_tus | all versions | โ |
| redhat/enterprise_linux_server_tus | all versions | โ |
| redhat/enterprise_linux_server_update_services_for_sap_solutions | all versions | โ |
| redhat/enterprise_linux_server_update_services_for_sap_solutions | all versions | โ |
| redhat/enterprise_linux_workstation | all versions | โ |