Week 20, 2024
9 WebKit CVEs disclosed in the week of May 13, 2024 (ISO week 20). 9 have a public fix commit; 0 embargoed.
| Severity | Count |
|---|---|
| Critical | 5 |
| High | 1 |
| Medium | 3 |
By component: WebCore (5), JSC (4)
By bug class: LogicError (3), UAF (2), OOB (2), Bypass (1), IntegerOverflow (1)
| CVE | Bugzilla | Component | Class | Severity | Fix |
|---|---|---|---|---|---|
| CVE-2024-27856 | 268765 | WebCore | UAF | critical | commit |
| CVE-2024-27851 | 272106 | WebCore | OOB | critical | commit |
| CVE-2024-27850 | 270767 | WebCore | LogicError | medium | commit |
| CVE-2024-27838 | 262337 | WebCore | LogicError | medium | commit |
| CVE-2024-27834 | 272750 | JSC | Bypass | high | commit |
| CVE-2024-27833 | 271491 | JSC | IntegerOverflow | critical | commit |
| CVE-2024-27830 | 271159 | WebCore | LogicError | medium | commit |
| CVE-2024-27820 | 270139 | JSC | OOB | critical | commit |
| CVE-2024-27808 | 268221 | JSC | UAF | critical | commit |