# RHSA-2023:4201: Security update for 4 packages RHSA-2023:4201, released July 18, 2023, fixes 19 CVEs across 4 products. 7 of them are being exploited (CVE-2023-41993); 7 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/rhsa-2023-4201 - Platform: Linux - Released: Jul 18, 2023 - Priority: Patch now (Closes CVE-2023-41993, exploited (CISA KEV)) - CVEs: 19, exploited: 7, on CISA KEV: 7 - Vendor advisory: https://access.redhat.com/errata/RHSA-2023:4201 ## Applies to | Product | Release | Fixed in | |---|---|---| | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | RHEL 9 | 0:2.38.5-1.el9_2.3 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | RHEL 9 | 0:2.38.5-1.el9_2.3 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | RHEL 9 | 0:2.38.5-1.el9_2.3 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | RHEL 9 | 0:2.38.5-1.el9_2.3 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-41993](https://patchblox.com/security/data/cve/CVE-2023-41993.md) | Patch now | webkit2gtk: The issue was addressed with improved checks | 9.8 | 0.2435 | CISA KEV | | [CVE-2023-32439](https://patchblox.com/security/data/cve/CVE-2023-32439.md) | Patch now | webkit2gtk: A type confusion issue was addressed with improved checks | 8.8 | 0.2397 | CISA KEV | | [CVE-2023-32435](https://patchblox.com/security/data/cve/CVE-2023-32435.md) | Patch now | webkit2gtk: A memory corruption issue was addressed with improved state management | 8.8 | 0.2295 | CISA KEV | | [CVE-2023-37450](https://patchblox.com/security/data/cve/CVE-2023-37450.md) | Patch now | webkit2gtk: The issue was addressed with improved checks | 8.8 | 0.1895 | CISA KEV | | [CVE-2023-42916](https://patchblox.com/security/data/cve/CVE-2023-42916.md) | Patch now | webkit2gtk: An out-of-bounds read was addressed with improved input validation | 6.8 | 0.1782 | CISA KEV | | [CVE-2024-23222](https://patchblox.com/security/data/cve/CVE-2024-23222.md) | Patch now | Unknown | 8.8 | 0.1059 | CISA KEV | | [CVE-2024-27834](https://patchblox.com/security/data/cve/CVE-2024-27834.md) | Patch now | WebKit: An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication | 8.8 | 0.0150 | CISA KEV | | [CVE-2025-24264](https://patchblox.com/security/data/cve/CVE-2025-24264.md) | Urgent | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.8 | 0.0094 | | | [CVE-2023-41074](https://patchblox.com/security/data/cve/CVE-2023-41074.md) | High | webkit2gtk: The issue was addressed with improved checks | 8.8 | 0.0412 | | | [CVE-2023-35074](https://patchblox.com/security/data/cve/CVE-2023-35074.md) | High | webkit2gtk: The issue was addressed with improved memory handling | 8.8 | 0.0158 | | | [CVE-2025-24158](https://patchblox.com/security/data/cve/CVE-2025-24158.md) | High | WebKit: Processing web content may lead to a denial-of-service | 8.8 | 0.0136 | | | [CVE-2024-27808](https://patchblox.com/security/data/cve/CVE-2024-27808.md) | High | WebKit: Processing web content may lead to arbitrary code execution | 8.8 | 0.0118 | | | [CVE-2025-31206](https://patchblox.com/security/data/cve/CVE-2025-31206.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 8.8 | 0.0100 | | | [CVE-2024-27833](https://patchblox.com/security/data/cve/CVE-2024-27833.md) | High | gir1.2-javascriptcoregtk-4.0: An integer overflow was addressed with improved input validation | 8.8 | 0.0082 | | | [CVE-2025-31204](https://patchblox.com/security/data/cve/CVE-2025-31204.md) | High | WebKit: Processing maliciously crafted web content may lead to memory corruption | 8.8 | 0.0068 | | | [CVE-2025-24223](https://patchblox.com/security/data/cve/CVE-2025-24223.md) | High | gir1.2-javascriptcoregtk-4.1: The issue was addressed with improved memory handling | 8.8 | 0.0033 | | | [CVE-2024-23252](https://patchblox.com/security/data/cve/CVE-2024-23252.md) | High | webkit2gtk3: This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 (bsc#1225071): - CVE-2024-23252:... | n/a | n/a | | | [CVE-2025-31215](https://patchblox.com/security/data/cve/CVE-2025-31215.md) | Routine | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 6.5 | 0.0065 | | | [CVE-2024-54658](https://patchblox.com/security/data/cve/CVE-2024-54658.md) | Routine | WebKit: Processing web content may lead to a denial-of-service | 6.5 | 0.0054 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo