Read the docs
Red Hat Security Advisory

RHSA-2025:23743

webkit2gtk3 security update

Released 2025-12-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 18 records

TI-2025-28137 CVE-2025-43433 · GHSA-7mgf-w3jg-xvr7

Memory corruption in Apple Safari

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01169 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28135 CVE-2025-43431 · GHSA-73f2-rmwh-r8w6

Memory corruption in Apple Safari

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00855 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28144 CVE-2025-43440 · GHSA-gh9m-4g47-fhpv

Cross-site scripting in Apple Safari

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00507 Published 2025-11-04 Partial fix · 26.1 CWE-79
TI-2025-28142 CVE-2025-43438 · GHSA-h3q9-mrw5-m795

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01112 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-416
TI-2025-28136 CVE-2025-43432 · GHSA-g56v-hwx4-cxqq

Use after free in Apple Safari

Priority LOW 24

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00842 Published 2025-11-04 Partial fix · 26.1 CWE-416
TI-2025-28138 CVE-2025-43434 · GHSA-3x69-vfm2-92j8

Use after free in Apple Safari

Priority LOW 23

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01284 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-416
TI-2025-28133 CVE-2025-43429 · GHSA-p2fp-xccv-vf5p

Memory corruption in Apple Safari

Priority LOW 23

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0145 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28145 CVE-2025-43441 · GHSA-m3cw-288r-j9r9

Memory corruption in Apple Safari

Priority LOW 22

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0096 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-119
TI-2025-28134 CVE-2025-43430 · GHSA-hmxw-42mv-c458

Improper input validation in Apple Safari

Priority LOW 22

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01087 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28160 CVE-2025-43458 · GHSA-x462-8pqp-gj6q

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00612 Published 2025-11-04 Partial fix · 26.1, 18.7.2 CWE-20
TI-2025-28131 CVE-2025-43427 · GHSA-vg6g-ppvj-7qh3

Improper input validation in Apple Safari

Priority LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0055 Published 2025-11-04 Partial fix · 26.1 CWE-20
TI-2025-28129 CVE-2025-43425 · GHSA-pq76-cc8r-h3cm

Memory corruption in Apple Safari

Priority LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00706 Published 2025-11-04 Partial fix · 26.1 CWE-119
TI-2025-28125 CVE-2025-43421 · GHSA-43xx-j7mw-696v

Out-of-bounds read in Apple Safari

Priority LOW 21

Multiple issues were addressed by disabling array allocation sinking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00642 Published 2025-11-04 Partial fix · 26.1 CWE-125