返回 CVE 浏览器

CVE-2023-39928

HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-10-06

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.

Affected Platforms (CPE)

📦

Webkitgtk

Webkitgtk

= 2.40.5

💻

Debian

Debian Linux

= 11.0= 12.0

💻

Fedoraproject

Fedora

= 37

References & Advisories

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/

🔗 https://security.gentoo.org/glsa/202401-33

🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1831

🔗 https://webkitgtk.org/security/WSA-2023-0009.html

🔗 https://www.debian.org/security/2023/dsa-5527

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/

🔗 https://security.gentoo.org/glsa/202401-33

🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1831

相关漏洞威胁

CVE-2025-662878.8

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handl...

CVE-2025-139477.4

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the...

CVE-2025-135027.5

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a ...

CVE-2023-22038.8

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This fla...