{
  "fix": "RLSA-2022:1777",
  "url": "https://patchblox.com/security/fix/linux/rlsa-2022-1777",
  "summary": "RLSA-2022:1777, released May 10, 2022, fixes 30 CVEs in webkit2gtk3 (version 0:2.34.6-1.el8). 2 of them are being exploited (CVE-2022-22620); 2 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "webkit2gtk3 security update",
  "released": "2022-05-10T06:24:27Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2022-22620, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 30,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 0,
  "maxEpss": 0.16342,
  "maxCvss": 8.8,
  "vendorAdvisory": "https://errata.rockylinux.org/RLSA-2022:1777",
  "appliesTo": [
    {
      "product": "webkit2gtk3",
      "productUrl": "https://patchblox.com/security/product/linux/webkit2gtk3",
      "release": "rocky 8",
      "fixedVersion": "0:2.34.6-1.el8",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2022-22620",
      "url": "https://patchblox.com/security/cve/CVE-2022-22620",
      "title": "gir1.2-javascriptcoregtk-4.0: A use after free issue was addressed with improved memory management",
      "priority": "Patch now",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.16342,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30952",
      "url": "https://patchblox.com/security/cve/CVE-2021-30952",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.06964,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30934",
      "url": "https://patchblox.com/security/cve/CVE-2021-30934",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.02641,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30851",
      "url": "https://patchblox.com/security/cve/CVE-2021-30851",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.02394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30823",
      "url": "https://patchblox.com/security/cve/CVE-2021-30823",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.02231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30951",
      "url": "https://patchblox.com/security/cve/CVE-2021-30951",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-22589",
      "url": "https://patchblox.com/security/cve/CVE-2022-22589",
      "title": "gir1.2-javascriptcoregtk-4.0: A validation issue was addressed with improved input sanitization",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.02005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30936",
      "url": "https://patchblox.com/security/cve/CVE-2021-30936",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01992,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30953",
      "url": "https://patchblox.com/security/cve/CVE-2021-30953",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01952,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30889",
      "url": "https://patchblox.com/security/cve/CVE-2021-30889",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01932,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30849",
      "url": "https://patchblox.com/security/cve/CVE-2021-30849",
      "title": "iTunes: Multiple memory corruption issues were addressed with improved memory handling.",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01904,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30887",
      "url": "https://patchblox.com/security/cve/CVE-2021-30887",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01784,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30888",
      "url": "https://patchblox.com/security/cve/CVE-2021-30888",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01729,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30897",
      "url": "https://patchblox.com/security/cve/CVE-2021-30897",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30984",
      "url": "https://patchblox.com/security/cve/CVE-2021-30984",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-22592",
      "url": "https://patchblox.com/security/cve/CVE-2022-22592",
      "title": "gir1.2-javascriptcoregtk-4.0: A logic issue was addressed with improved state management",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01623,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30818",
      "url": "https://patchblox.com/security/cve/CVE-2021-30818",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01618,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-22590",
      "url": "https://patchblox.com/security/cve/CVE-2022-22590",
      "title": "libjavascriptcoregtk-4.0-18: A use after free issue was addressed with improved memory management",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01555,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-45481",
      "url": "https://patchblox.com/security/cve/CVE-2021-45481",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01532,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-45482",
      "url": "https://patchblox.com/security/cve/CVE-2021-45482",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01532,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-45483",
      "url": "https://patchblox.com/security/cve/CVE-2021-45483",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30809",
      "url": "https://patchblox.com/security/cve/CVE-2021-30809",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30890",
      "url": "https://patchblox.com/security/cve/CVE-2021-30890",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01456,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30954",
      "url": "https://patchblox.com/security/cve/CVE-2021-30954",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01452,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30846",
      "url": "https://patchblox.com/security/cve/CVE-2021-30846",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01355,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30848",
      "url": "https://patchblox.com/security/cve/CVE-2021-30848",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30884",
      "url": "https://patchblox.com/security/cve/CVE-2021-30884",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-30836",
      "url": "https://patchblox.com/security/cve/CVE-2021-30836",
      "title": "webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nThe following packages have b...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.01104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-22594",
      "url": "https://patchblox.com/security/cve/CVE-2022-22594",
      "title": "gir1.2-javascriptcoregtk-4.0: A cross-origin issue in the IndexDB API was addressed with improved input validation",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00821,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-22637",
      "url": "https://patchblox.com/security/cve/CVE-2022-22637",
      "title": "webkit2gtk-driver: A logic issue was addressed with improved state management",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00761,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}