VulnerableCode Package Details - pkg:alpm/archlinux/webkit2gtk@2.36.7-1

Search for packages

Vulnerability	Summary	Fixed by
VCID-a252-b57c-aaah Aliases: CVE-2022-32893	An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.	2.36.8-1 Affected by 0 other vulnerabilities.
VCID-n3cz-u2q4-aaap Aliases: CVE-2022-32886	A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.	2.36.8-1 Affected by 0 other vulnerabilities.
VCID-nksc-9ncx-aaae Aliases: CVE-2022-32891	The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.	2.36.8-1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-a252-b57c-aaah
Aliases:
CVE-2022-32893

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

2.36.8-1
Affected by 0 other vulnerabilities.

VCID-n3cz-u2q4-aaap
Aliases:
CVE-2022-32886

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.

2.36.8-1
Affected by 0 other vulnerabilities.

VCID-nksc-9ncx-aaae
Aliases:
CVE-2022-32891

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

2.36.8-1
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T07:43:57.738177+00:00	Arch Linux Importer	Affected by	VCID-n3cz-u2q4-aaap	https://security.archlinux.org/AVG-2819	36.0.0
2025-03-28T07:43:57.707940+00:00	Arch Linux Importer	Affected by	VCID-nksc-9ncx-aaae	https://security.archlinux.org/AVG-2819	36.0.0
2025-03-28T07:43:57.677372+00:00	Arch Linux Importer	Affected by	VCID-a252-b57c-aaah	https://security.archlinux.org/AVG-2819	36.0.0
2024-09-18T01:59:06.477868+00:00	Arch Linux Importer	Affected by	VCID-n3cz-u2q4-aaap	https://security.archlinux.org/AVG-2819	34.0.1
2024-09-18T01:59:06.451632+00:00	Arch Linux Importer	Affected by	VCID-nksc-9ncx-aaae	https://security.archlinux.org/AVG-2819	34.0.1
2024-09-18T01:59:06.425647+00:00	Arch Linux Importer	Affected by	VCID-a252-b57c-aaah	https://security.archlinux.org/AVG-2819	34.0.1
2024-01-03T22:25:24.688799+00:00	Arch Linux Importer	Affected by	VCID-n3cz-u2q4-aaap	https://security.archlinux.org/AVG-2819	34.0.0rc1
2024-01-03T22:25:24.665095+00:00	Arch Linux Importer	Affected by	VCID-nksc-9ncx-aaae	https://security.archlinux.org/AVG-2819	34.0.0rc1
2024-01-03T22:25:24.640682+00:00	Arch Linux Importer	Affected by	VCID-a252-b57c-aaah	https://security.archlinux.org/AVG-2819	34.0.0rc1