Read the docs
Red Hat Security Advisory

RHSA-2025:23971

webkit2gtk3 security update

Released 2025-12-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2025-28228 CVE-2025-43529 · GHSA-m9mp-fmfc-g6gc

Use after free in Apple Safari

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.2565 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-12953 CVE-2025-14174 · GHSA-9fjm-6w64-76r7

Memory corruption in Google Chrome

Priority CRITICAL 97KEV

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.55334 Published 2025-12-12 Fixed in 143.0.7499.110 CWE-119
TI-2025-28239 CVE-2025-43541 · GHSA-cv7x-j8xj-r7m8

Type confusion in Apple Safari

Priority MEDIUM 47

A type confusion issue was addressed with improved state handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.3414 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-843
TI-2025-28202 CVE-2025-43501 · GHSA-vf3c-qw39-5vqw

Buffer overflow in Apple Safari

Priority LOW 23

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00773 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-120
TI-2025-28235 CVE-2025-43536 · GHSA-9q7c-3v6c-w3ww

Use after free in Apple Safari

Priority LOW 21

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00577 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-416
TI-2025-28230 CVE-2025-43531 · GHSA-g838-wh9m-v2pq

Race condition in Apple Safari

Priority LOW 16

A race condition was addressed with improved state handling.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00454 Published 2025-12-17 Partial fix · 26.2, 18.7.3 CWE-362