Skip to content
Fencer Vulns
high 8.8

CVE-2024-23222 kev in the critical feed json

A type confusion issue was addressed with improved checks.

published 2024-01-23 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-20741

cvss
8.8
version 3.1, CNA
cisa kev
Exploited
added 2024-01-23
epss
10.6%
EPSS 10.6% chance of exploitation in 30 days, percentile 95%
public exploits
0
none known

Summary

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.

Patch / fix

cisa required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  • Apple Safari 17.3
  • Apple iOS and iPadOS 15.8.7, 16.7.5, 17.3
  • Apple macOS 12.7.3, 13.6.4, 14.3
  • Apple tvOS 17.3
  • Apple visionOS 1.0.2
  • wpewebkit Debian 14, Debian 13 2.42.5-1
  • webkit2gtk Debian 12 2.42.5-1~deb12u1
  • webkit2gtk Debian 14, Debian 13 2.42.5-1

debian advisories DEBIAN-CVE-2024-23222

  • webkit2gtk Ubuntu 22.04 LTS 2.42.5-0ubuntu0.22.04.2

ubuntu advisories UBUNTU-CVE-2024-23222

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • webkit2gtk3 RHEL 9 2.38.5-1.el9_2.3
  • webkit2gtk3-jsc RHEL 9 2.38.5-1.el9_2.3
  • webkit2gtk3 RHEL 8 2.38.5-1.el8_8.5
  • webkit2gtk3-jsc RHEL 8 2.38.5-1.el8_8.5
  • webkitgtk4 RHEL 7 ELS 2.48.3-2.el7_9
  • webkitgtk4-jsc RHEL 7 ELS 2.48.3-2.el7_9
  • webkit2gtk3 RHEL 8.4 TUS, RHEL 8.4 E4S, RHEL 8.4 AUS 2.46.3-1.el8_4
  • webkit2gtk3-jsc RHEL 8.4 TUS, RHEL 8.4 E4S, RHEL 8.4 AUS 2.46.3-1.el8_4

red hat advisories RHSA-2025:10364RHSA-2024:9679RHSA-2024:9638RHSA-2024:9680RHSA-2024:9653RHSA-2024:8496

  • webkit2gtk3 SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Module for Desktop Applications 15 SP5 +2 more 2.46.0-150400.4.91.1
  • webkit2gtk4 SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE High Performance Computing 15 SP4-LTSS +1 more 2.46.0-150400.4.91.1
  • webkit2gtk3-soup2 SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Module for Basesystem 15 SP5 +2 more 2.46.0-150400.4.91.1
  • webkit2gtk3 SLE Module for Desktop Applications 15 SP6, openSUSE Leap 15.6 2.46.0-150600.12.12.1
  • webkit2gtk4 SLE Module for Development Tools 15 SP6, SLE Module for Basesystem 15 SP6, openSUSE Leap 15.6 2.46.0-150600.12.12.1
  • webkit2gtk3-soup2 SLE Module for Basesystem 15 SP6, openSUSE Leap 15.6 2.46.0-150600.12.12.1
  • webkit2gtk3 SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Module for Desktop Applications 15 SP5 +3 more 2.42.5-150400.4.75.1
  • webkit2gtk4 SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Module for Development Tools 15 SP5 +3 more 2.42.5-150400.4.75.1

suse advisories SUSE-SU-2024:3870-1SUSE-SU-2024:3869-1SUSE-SU-2024:3752-1SUSE-SU-2024:0548-1SUSE-SU-2024:0545-1SUSE-SU-2024:0519-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-23222 updated cvss 8.8

webkitgtk: type confusion may lead to arbitrary code execution

  • Red Hat Enterprise Linux 6 webkitgtk Red Hat Enterprise Linux 7 webkitgtk3, libwebkit2gtk
    affected: workaround, no fix planned “Do not process or load untrusted web content. Please update the affected package as soon as possible.”
  • Red Hat Enterprise Linux AppStream (v. 8) webkit2gtk3 2.38.5-1.el8_8.5, webkit2gtk3-jsc 2.38.5-1.el8_8.5
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2023:4202
  • Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3 2.38.5-1.el9_2.3, webkit2gtk3-jsc 2.38.5-1.el9_2.3
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2023:4201
  • Red Hat Enterprise Linux AppStream AUS (v. 8.2) webkit2gtk3 2.46.3-1.el8_2, webkit2gtk3-jsc 2.46.3-1.el8_2
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:9680
  • Red Hat Enterprise Linux AppStream AUS (v.8.4) webkit2gtk3 2.46.3-1.el8_4, webkit2gtk3-jsc 2.46.3-1.el8_4
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:9679
  • Red Hat Enterprise Linux AppStream AUS (v.8.6) webkit2gtk3 2.46.3-1.el8_6, webkit2gtk3-jsc 2.46.3-1.el8_6
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:9653
  • Red Hat Enterprise Linux AppStream E4S (v.8.4) webkit2gtk3 2.46.3-1.el8_4, webkit2gtk3-jsc 2.46.3-1.el8_4
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:9679
  • Red Hat Enterprise Linux AppStream E4S (v.8.6) webkit2gtk3 2.46.3-1.el8_6, webkit2gtk3-jsc 2.46.3-1.el8_6
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:9653
show 5 more
  • Red Hat Enterprise Linux AppStream E4S (v.9.0) webkit2gtk3 2.46.1-1.el9_0, webkit2gtk3-jsc 2.46.1-1.el9_0
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:8496
  • Red Hat Enterprise Linux AppStream EUS (v.9.2) webkit2gtk3 2.46.3-1.el9_2, webkit2gtk3-jsc 2.46.3-1.el9_2
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:9638
  • Red Hat Enterprise Linux AppStream TUS (v.8.4) webkit2gtk3 2.46.3-1.el8_4, webkit2gtk3-jsc 2.46.3-1.el8_4
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:9679
  • Red Hat Enterprise Linux AppStream TUS (v.8.6) webkit2gtk3 2.46.3-1.el8_6, webkit2gtk3-jsc 2.46.3-1.el8_6
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2024:9653
  • Red Hat Enterprise Linux Server (v. 7 ELS) webkitgtk4 2.48.3-2.el7_9, webkitgtk4-jsc 2.48.3-2.el7_9 Red Hat Enterprise Linux Server Optional (v. 7 ELS) webkitgtk4-doc 2.48.3-2.el7_9, webkitgtk4-devel 2.48.3-2.el7_9, webkitgtk4-debuginfo 2.48.3-2.el7_9, webkitgtk4-jsc-devel 2.48.3-2.el7_9
    fixed: vendor fix “Do not process or load untrusted web content. Please update the affected package as soon as possible.” RHSA-2025:10364

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. 0-day patched (Project Zero)
  2. Added to CISA KEV
  3. Published
  4. CISA SSVC: exploitation active
  5. CISA patch deadline

Known exploited

Added
2 y ago
Patch by
2024-02-13 (2 y ago)
Ransomware
Not known
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor, product
Apple, Multiple Products
CISA name
Apple Multiple Products WebKit Type Confusion Vulnerability

Zero-day

Detected in real attacks while still unknown to the vendor and the public, per Google Project Zero's 0day In-the-Wild tracker.

Patched
2024-01-22
Details
project zero tracker

CISA SSVC

Exploitation
Active, exploited in the wild
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

10.59% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CNA 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

  • Apple Safari
  • Apple iOS and iPadOS
  • Apple macOS
  • Apple tvOS
  • Apple visionOS

Classification

Weakness
  • CWE-843 Access of Resource Using Incompatible Type

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.