The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2126 advisory.

    [2.42.5-1]
    - Update to 2.42.5       Resolves: RHEL-3960

    [2.42.4-1]
    - Update to 2.42.4       Resolves: RHEL-3960       Resolves: RHEL-19366

    [2.42.3-1]
    - Update to 2.42.3       Resolves: RHEL-3960

    [2.42.2-1]
    - Update to 2.42.2       Resolves: RHEL-3960

    [2.42.1-1]
    - Update to 2.42.1       Resolves: RHEL-3960

    [2.42.0-1]
    - Upgrade to 2.42.0       Resolves: RHEL-3960

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari     17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-     of-service. (CVE-2023-41983)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of webkitgtk4 installed on the remote host is prior to 2.42.3-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2427 advisory.

    2024-04-11: CVE-2023-42843 was added to this advisory.

    2024-03-27: CVE-2024-23226 was added to this advisory.

    Impact: Visiting a website that frames malicious content may lead to UI spoofing.

    Description: The issue was addressed with improved UI handling. (CVE-2022-32919)

    A website may be able to track the websites a user visited in Safari private browsing mode.
    (CVE-2022-32933)

    A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
    This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious     website may lead to address bar spoofing. (CVE-2022-46705)

    A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
    This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar     spoofing. (CVE-2022-46725)

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS     16.7.2 and iPadOS 16.7.2. A user's password may be read aloud by VoiceOver. (CVE-2023-32359)

    The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS     10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
    (CVE-2023-35074)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and     iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
    (CVE-2023-39434)

    A use-after-free vulnerability exists in the MediaRecorder API of the WebKit GStreamer-based ports     (WebKitGTK and WPE WebKit). A specially crafted web page can abuse this vulnerability to cause memory     corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to     trigger this vulnerability. (CVE-2023-39928)

    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An     attacker with JavaScript execution may be able to execute arbitrary code. (CVE-2023-40451)

    The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS     17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
    (CVE-2023-41074)

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari     17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-     of-service. (CVE-2023-41983)

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 16.7     and iPadOS 16.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report     that this issue may have been actively exploited against versions of iOS before iOS 16.7. (CVE-2023-41993)

    An inconsistent user interface issue was addressed with improved state management. This issue is fixed in     iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a     malicious website may lead to address bar spoofing. (CVE-2023-42843)

    A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS     10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may     lead to arbitrary code execution. (CVE-2023-42852)

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and     iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive     information. Apple is aware of a report that this issue may have been exploited against versions of iOS     before iOS 16.7.1. (CVE-2023-42916)

    A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2     and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code     execution. Apple is aware of a report that this issue may have been exploited against versions of iOS     before iOS 16.7.1. (CVE-2023-42917)

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4, visionOS     1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, tvOS 17.4. Processing web content may lead to arbitrary code     execution. (CVE-2024-23226)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程 Ubuntu 22.04 LTS / 23.04 主机上安装的程序包受到 USN-6490-1 公告中提及的多个漏洞的影响。

  - 已通过改进内存处理解决此问题。已在 macOS Sonoma 14.1、Safari 17.1、iOS 16.7.2 和 iPadOS 16.7.2、iOS 17.1 和 iPadOS 17.1 中修复此问题。处理网络内容可能会导致拒绝服务。(CVE-2023-41983)

  - 已通过改进检查解决此逻辑问题。此问题已在 iOS 17.1 和 iPadOS 17.1、watchOS 10.1、iOS 16.7.2 和 iPadOS 16.7.2、macOS Sonoma 14.1、Safari 17.1 和 tvOS 17.1 中修复。处理 Web 内容可能会导致任意代码执行。(CVE-2023-42852)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

移动设备上运行的 Apple iOS 版本低于 16.7.2。因此，该主机受到多个漏洞的影响。

移动设备上运行的 Apple iOS 版本低于 17.1。因此，该主机受到多个漏洞的影响。

リモートの Fedora 37 ホストには、FEDORA-2023-cb3cacfef8 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - メモリ処理を改善することで、この問題に対処しました。この問題は、macOS Sonoma 14.1、および Safari 17.1、iOS 16.7.2 および iPadOS 16.7.2、iOS 17.1、iPadOS 17.1 で修正されています。ウェブコンテンツを処理すると、サービス拒否が引き起こされる可能性があります。(CVE-2023-41983)

  - チェックを改善することで、ロジックの問題に対処しました。この問題は、iOS 17.1 および iPadOS 17.1、watchOS 10.1 および iOS 16.7.2、iPadOS 16.7.2、macOS Sonoma 14.1、Safari 17.1、tvOS 17.1 で修正されています。Web コンテンツを処理すると、任意のコードが実行される可能性があります。(CVE-2023-42852)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの Fedora 38 ホストには、FEDORA-2023-11aaf99627 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - メモリ処理を改善することで、この問題に対処しました。この問題は、macOS Sonoma 14.1、および Safari 17.1、iOS 16.7.2 および iPadOS 16.7.2、iOS 17.1、iPadOS 17.1 で修正されています。ウェブコンテンツを処理すると、サービス拒否が引き起こされる可能性があります。(CVE-2023-41983)

  - チェックを改善することで、ロジックの問題に対処しました。この問題は、iOS 17.1 および iPadOS 17.1、watchOS 10.1 および iOS 16.7.2、iPadOS 16.7.2、macOS Sonoma 14.1、Safari 17.1、tvOS 17.1 で修正されています。Web コンテンツを処理すると、任意のコードが実行される可能性があります。(CVE-2023-42852)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの Ubuntu 22.04LTS/23.04ホストには、USN-6490-1アドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - メモリ処理を改善することで、この問題に対処しました。この問題は、macOS Sonoma 14.1、および Safari 17.1、iOS 16.7.2 および iPadOS 16.7.2、iOS 17.1、iPadOS 17.1 で修正されています。ウェブコンテンツを処理すると、サービス拒否が引き起こされる可能性があります。(CVE-2023-41983)

  - チェックを改善することで、ロジックの問題に対処しました。この問題は、iOS 17.1 および iPadOS 17.1、watchOS 10.1 および iOS 16.7.2、iPadOS 16.7.2、macOS Sonoma 14.1、Safari 17.1、tvOS 17.1 で修正されています。Web コンテンツを処理すると、任意のコードが実行される可能性があります。(CVE-2023-42852)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

モバイルデバイスで実行中の Apple iOS のバージョンは、16.7.2 より前です。したがって、複数の脆弱性の影響を受けます。

モバイルデバイスで実行中の Apple iOS のバージョンは、17.1 より前です。したがって、複数の脆弱性の影響を受けます。

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-11aaf99627 advisory.

     * Bump Safari version in user agent header.
     * Fix blob URL regression that broke many websites.
     * Fix several crashes and rendering issues.
     * Fix CVE-2023-41983 and CVE-2023-42852

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-cb3cacfef8 advisory.

     * Bump Safari version in user agent header.
     * Fix blob URL regression that broke many websites.
     * Fix several crashes and rendering issues.
     * Fix CVE-2023-41983 and CVE-2023-42852

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6490-1 advisory.

    Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were     tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to     web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary     code execution.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 16.7.2. It is, therefore, affected by multiple vulnerabilities.

The version of Apple iOS running on the mobile device is prior to 17.1. It is, therefore, affected by multiple vulnerabilities.

ID	名稱	產品	系列	已發布	已更新	嚴重性
195042	Oracle Linux 9 : webkit2gtk3 (ELSA-2024-2126)	Nessus	Oracle Linux Local Security Checks	2024/5/6	2024/9/21	critical
226045	Linux Distros Unpatched Vulnerability : CVE-2023-41983	Nessus	Misc.	2025/3/5	2025/3/5	medium
189350	Amazon Linux 2 : webkitgtk4 (ALAS-2024-2427)	Nessus	Amazon Linux Local Security Checks	2024/1/23	2024/12/11	high
186015	Ubuntu 22.04 LTS / 23.04 / 23.10：WebKitGTK 漏洞 (USN-6490-1)	Nessus	Ubuntu Local Security Checks	2023/11/20	2024/8/27	high
183965	Apple iOS < 16.7.2 多个漏洞 (HT213981)	Nessus	Mobile Devices	2023/10/27	2025/7/14	high
183966	Apple iOS < 17.1 多个漏洞 (HT213982)	Nessus	Mobile Devices	2023/10/27	2025/7/14	high
241427	RHEL 7：webkitgtk4 (RHSA-2025:10364)	Nessus	Red Hat Local Security Checks	2025/7/7	2025/7/7	critical
185612	Fedora 37 : webkitgtk (2023-cb3cacfef8)	Nessus	Fedora Local Security Checks	2023/11/14	2024/11/14	high
186280	Fedora 38 : webkitgtk (2023-11aaf99627)	Nessus	Fedora Local Security Checks	2023/11/25	2024/11/14	high
186015	Ubuntu 22.04LTS/23.04/23.10：WebKitGTK+の脆弱性 (USN-6490-1)	Nessus	Ubuntu Local Security Checks	2023/11/20	2024/8/27	high
183965	Apple iOS < 16.7.2 複数の脆弱性 (HT213981)	Nessus	Mobile Devices	2023/10/27	2025/7/14	high
183966	Apple iOS < 17.1複数の脆弱性 (HT213982)	Nessus	Mobile Devices	2023/10/27	2025/7/14	high
241427	RHEL 7 : webkitgtk4 (RHSA-2025:10364)	Nessus	Red Hat Local Security Checks	2025/7/7	2025/7/7	critical
186280	Fedora 38 : webkitgtk (2023-11aaf99627)	Nessus	Fedora Local Security Checks	2023/11/25	2024/11/14	high
185612	Fedora 37 : webkitgtk (2023-cb3cacfef8)	Nessus	Fedora Local Security Checks	2023/11/14	2024/11/14	high
186015	Ubuntu 22.04 LTS / 23.04 / 23.10 : WebKitGTK vulnerabilities (USN-6490-1)	Nessus	Ubuntu Local Security Checks	2023/11/20	2024/8/27	high
183965	Apple iOS < 16.7.2 Multiple Vulnerabilities (HT213981)	Nessus	Mobile Devices	2023/10/27	2025/7/14	high
183966	Apple iOS < 17.1 Multiple Vulnerabilities (HT213982)	Nessus	Mobile Devices	2023/10/27	2025/7/14	high
241427	RHEL 7 : webkitgtk4 (RHSA-2025:10364)	Nessus	Red Hat Local Security Checks	2025/7/7	2025/7/7	critical

偵測

搜尋 Plugin

critical

medium

high

high

high

high

critical

high

high

high

high

high

critical

high

high

high

high

high

critical