VDB

GCVE-110-MAGEIA-2023-177

GCVE-110-MAGEIA-2023-177
Advisory Published
Vulnetix · Advisory published May 21, 2023
HTML document may be able to render iframes with sensitive user information (CVE-2022-0108) maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-32885) use-after-free vulnerability exists in WebCore::RenderLayer. This issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. (CVE-2023-25358) maliciously crafted web content may bypass Same Origin Policy (CVE-2023-27932) Website may be able to track sensitive user information. Description: The issue was addressed by removing origin information. (CVE-2023-27954) maliciously crafted web content may lead to arbitrary code execution (CVE-2023-28205)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiawebkit20 (affected), 2.38.6-1.mga8 (unaffected)—

Aliases

CVE-2022-0108

References

Updated webkit2 packages fix security vulnerability
advisory
Updated webkit2 packages fix security vulnerability
issue
Updated webkit2 packages fix security vulnerability
issue
Updated webkit2 packages fix security vulnerability
issue

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›