Week 31, 2024
11 WebKit CVEs disclosed in the week of July 29, 2024 (ISO week 31). 9 have a public fix commit; 1 embargoed.
| Severity | Count |
|---|---|
| High | 1 |
| Medium | 10 |
By component: WebKit (10), WebCore (1)
By bug class: OOB (4), LogicError (3), UAF (2), Bypass (1), TypeConfusion (1)
| CVE | Bugzilla | Component | Class | Severity | Fix |
|---|---|---|---|---|---|
| CVE-2024-54551 | 275117 | WebCore | UAF | medium | commit |
| CVE-2024-4558 | 274165 | WebKit | OOB | medium | commit |
| CVE-2024-44206 | 280765 | WebKit | LogicError | high | embargoed |
| CVE-2024-44185 | 276097 | WebKit | TypeConfusion | medium | commit |
| CVE-2024-40794 | 275272 | WebKit | LogicError | medium | commit |
| CVE-2024-40789 | — | WebKit | OOB | medium | — |
| CVE-2024-40785 | 273805 | WebKit | Bypass | medium | commit |
| CVE-2024-40782 | 268770 | WebKit | LogicError | medium | commit |
| CVE-2024-40780 | 275273 | WebKit | OOB | medium | commit |
| CVE-2024-40779 | 275431 | WebKit | OOB | medium | commit |
| CVE-2024-40776 | 273176 | WebKit | UAF | medium | commit |