webkit2gtk3-plugin-process-gtk2 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the webkit2gtk3-plugin-process-gtk2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Out-of-Bounds	*
M Information Exposure	*
M Origin Validation Error	*
M CVE-2024-40866	*
H Out-of-Bounds	*
H Out-of-Bounds	*
M Cross-site Scripting (XSS)	*
M Overly Permissive Cross-domain Whitelist	*
H Out-of-Bounds	*
M Use After Free	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Use After Free	*
M Out-of-bounds Read	*
H Improper Authorization	*
M CVE-2023-42956	*
M Authentication Bypass	*
H Use After Free	*
M CVE-2024-23263	*
M CVE-2024-23254	*
H CVE-2024-23226	*
M CVE-2024-23252	*
M Arbitrary Code Injection	*
M CVE-2024-23284	*
L Out-of-bounds Write	<0:2.24.3-1.el8
L Use After Free	<0:2.24.3-1.el8
L Information Exposure	<0:2.24.3-1.el8
L Out-of-Bounds	<0:2.24.3-1.el8
L Use After Free	<0:2.24.3-1.el8
L Integer Overflow or Wraparound	<0:2.24.3-1.el8
L Access of Resource Using Incompatible Type ('Type Confusion')	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Improper Validation of Array Index	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Read	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Read	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Use After Free	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Use After Free	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Use After Free	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Improper Authorization	<0:2.24.3-1.el8
L Cross-site Scripting (XSS)	<0:2.24.3-1.el8
L Improper Input Validation	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Use After Free	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Out-of-bounds Write	<0:2.24.3-1.el8
L Cross-site Scripting (XSS)	<0:2.24.3-1.el8
L Use After Free	<0:2.24.3-1.el8
L Arbitrary Code Injection	<0:2.24.3-1.el8
L Out-of-Bounds	<0:2.24.3-1.el8
L Out-of-bounds Read	<0:2.24.3-1.el8
L Information Exposure	<0:2.24.3-1.el8
L Improper Authorization	<0:2.24.3-1.el8
M Cross-site Scripting (XSS)	<0:2.24.4-2.el8_1
M Use After Free	<0:2.24.4-2.el8_1
M Out-of-Bounds	<0:2.24.4-2.el8_1
M Out-of-Bounds	<0:2.24.4-2.el8_1
M Cross-site Scripting (XSS)	<0:2.24.4-2.el8_1
M Out-of-Bounds	<0:2.24.4-2.el8_1
M Out-of-bounds Write	<0:2.24.4-2.el8_1
M Out-of-bounds Write	<0:2.24.4-2.el8_1
M Cross-site Scripting (XSS)	<0:2.24.4-2.el8_1
M Use After Free	<0:2.24.4-2.el8_1
M Out-of-bounds Write	<0:2.24.4-2.el8_1
M Out-of-Bounds	<0:2.24.4-2.el8_1
M Out-of-bounds Write	<0:2.24.4-2.el8_1
M Out-of-bounds Write	<0:2.24.4-2.el8_1
M Out-of-Bounds	<0:2.24.4-2.el8_1
M Out-of-Bounds	<0:2.24.4-2.el8_1
M Cross-site Scripting (XSS)	<0:2.24.4-2.el8_1
M Use After Free	*

webkit2gtk3-plugin-process-gtk2 vulnerabilities

Direct Vulnerabilities

How to fix?