The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8054 advisory.

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS     Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web     content may lead to arbitrary code execution. (CVE-2022-22624)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS     Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2022-22628)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-22629)

  - A cookie management issue was addressed with improved state management. This issue is fixed in Security     Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose     sensitive user information. (CVE-2022-22662)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to code execution. (CVE-2022-26700)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26709)

  - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and     iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may     lead to arbitrary code execution. (CVE-2022-26710)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26716, CVE-2022-26719)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-26717)

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8054 advisory.

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26716, CVE-2022-26719)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-26717)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-22629)

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30293)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS     Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2022-22628)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to code execution. (CVE-2022-26700)

  - A cookie management issue was addressed with improved state management. This issue is fixed in Security     Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose     sensitive user information. (CVE-2022-22662)

  - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and     iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may     lead to arbitrary code execution. (CVE-2022-26710)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26709)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS     Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web     content may lead to arbitrary code execution. (CVE-2022-22624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2022_8054 advisory.

    * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624)

    * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22628)

    * webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629)

    * webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662)

    * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700)

    * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26709)

    * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26710)

    * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26716)

    * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26717)

    * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26719)

    * webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary     code execution (CVE-2022-30293)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
168001	AlmaLinux 9 : webkit2gtk3 (ALSA-2022:8054)	Nessus	Alma Linux Local Security Checks	2022/11/19	2023/10/3	high
168097	Oracle Linux 9 : webkit2gtk3 (ELSA-2022-8054)	Nessus	Oracle Linux Local Security Checks	2022/11/22	2024/10/22	high
359382	Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2022_8054)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
161410	macOS 12.x < 12.4 Multiple Vulnerabilities (HT213257)	Nessus	MacOS X Local Security Checks	2022/5/20	2024/8/23	critical

検出

プラグインの検索

high

high

high

critical