Week 4, 2024
4 WebKit CVEs disclosed in the week of January 22, 2024 (ISO week 4). 4 have a public fix commit; 0 embargoed.
| Severity | Count |
|---|---|
| Critical | 2 |
| Medium | 2 |
By component: WebCore (2), WebKit (1), JSC (1)
By bug class: Bypass (2), UAF (1), TypeConfusion (1)
| CVE | Bugzilla | Component | Class | Severity | Fix |
|---|---|---|---|---|---|
| CVE-2024-23271 | 265812 | WebCore | Bypass | medium | commit |
| CVE-2024-23222 | 267134 | JSC | TypeConfusion | critical | commit |
| CVE-2024-23213 | 266619 | WebCore | UAF | critical | commit |
| CVE-2024-23206 | 262699 | WebKit | Bypass | medium | commit |