Red Hat Security Advisory

RHSA-2025:14421

webkit2gtk3 security update

Released 2025-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) webkit2gtk3-2.48.5-1.el9_2, webkit2gtk3-devel-2.48.5-1.el9_2, webkit2gtk3-jsc-2.48.5-1.el9_2 +1

Fixes 9 records

TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20

TI-2025-22513 CVE-2025-31278 · GHSA-27vh-g29g-4cf7

Memory corruption in Apple Safari

MEDIUM 43

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01244 Published 2025-07-29 Partial fix · 18.6, 17.7.9 +3 CWE-119

TI-2025-22509 CVE-2025-31273 · GHSA-wvw8-3gm3-qgrg

Memory corruption in Apple Safari

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01142 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119

TI-2025-27939 CVE-2025-43227 · GHSA-c44c-6q5j-x2g3

Apple Safari: Processing maliciously crafted web content may disclose sensitive user…

MEDIUM 41

This issue was addressed through improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01252 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-359

TI-2025-27928 CVE-2025-43216 · GHSA-j8r7-qf6f-m64x

Use after free in Apple Safari

LOW 31

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01108 Published 2025-07-29 Partial fix · 18.6, 17.7.9 +3 CWE-416

TI-2025-27924 CVE-2025-43212 · GHSA-qcgv-3crg-w972

Memory corruption in Apple Safari

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01056 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119

TI-2025-27952 CVE-2025-43240 · GHSA-2c58-jp5q-q38f

Apple Safari: A download's origin may be incorrectly associated

LOW 30

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.01005 Published 2025-07-29 Partial fix · 18.6, 15.6 CWE-703

TI-2025-27923 CVE-2025-43211 · GHSA-4qjf-x9px-pc8w

Resource allocation without limits in Apple Safari

LOW 28

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00416 Published 2025-07-29 Partial fix · 18.6, 17.7.9 +3 CWE-770

TI-2025-27975 CVE-2025-43265 · GHSA-pjx4-c398-w5h4

Out-of-bounds read in Apple Safari

LOW 19

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00337 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-125