Red Hat Security Advisory

RHSA-2026:16695

webkit2gtk3 security update

Released 2026-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) webkit2gtk3-2.52.3-1.el9_2, webkit2gtk3-devel-2.52.3-1.el9_2, webkit2gtk3-jsc-2.52.3-1.el9_2 +1

Fixes 18 records

TI-2026-16709 CVE-2026-20652 · GHSA-jhp8-jfxv-5ggj

Uncontrolled resource consumption in Apple Safari

MEDIUM 40

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00713 Published 2026-02-11 Partial fix · 26.3, 18.7.5 CWE-400

TI-2026-16721 CVE-2026-20665 · GHSA-w9qh-3c3h-mc7x

Protection mechanism failure in Apple Safari

LOW 36

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00634 Published 2026-03-25 Partial fix · 26.4, 18.7.7 CWE-693

TI-2025-27926 CVE-2025-43214 · GHSA-x2xr-g2pj-h44r

Memory corruption in Apple Safari

LOW 33

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01094 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119

TI-2025-28159 CVE-2025-43457 · GHSA-9c63-94gf-85h2

Use after free in Apple Safari

LOW 32

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00613 Published 2025-11-04 Partial fix · 26.1 CWE-416

TI-2026-23046 CVE-2026-28857 · GHSA-xc63-96v5-38fr

Out-of-bounds read in Apple Safari

LOW 30

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00671 Published 2026-03-25 Partial fix · 26.4 CWE-125

TI-2025-27925 CVE-2025-43213 · GHSA-642p-23g6-ph4w

Memory corruption in Apple Safari

LOW 30

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00782 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119

TI-2026-16701 CVE-2026-20644 · GHSA-pxhf-qg7h-8x8m

Memory corruption in Apple Safari

LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00362 Published 2026-02-11 Partial fix · 26.3, 18.7.5 CWE-119

TI-2026-16693 CVE-2026-20636 · GHSA-wx45-vx6h-76cq

Memory corruption in Apple Safari

LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00467 Published 2026-02-11 Partial fix · 26.3 CWE-119

TI-2025-28212 CVE-2025-43511 · GHSA-r8ww-q8x3-4wc9

Use after free in Apple Safari

LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00462 Published 2025-12-12 Partial fix · 26.2, 18.7.2 CWE-416

TI-2026-16700 CVE-2026-20643 · GHSA-gvvx-mjmx-h5qh

Improper input validation in Apple Safari

LOW 25

A cross-origin issue in the Navigation API was addressed with improved input validation.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00368 Published 2026-03-17 Partial fix · 26.4, 18.7.7 +2 CWE-20

TI-2026-16665 CVE-2026-20608 · GHSA-jhq4-533p-8p4c

Resource allocation without limits in Apple Safari

LOW 25

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00282 Published 2026-02-11 Partial fix · 26.3, 18.7.5 CWE-770

TI-2026-16732 CVE-2026-20676 · GHSA-cpw4-rfmm-h598

Uncontrolled resource consumption in Apple Safari

LOW 24

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2026-02-11 Partial fix · 26.3 CWE-400

TI-2026-23048 CVE-2026-28859 · GHSA-q74v-rxg6-m2w6

Out-of-bounds read in Apple Safari

LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00661 Published 2026-03-25 Partial fix · 26.4 CWE-125

TI-2026-16720 CVE-2026-20664 · GHSA-v2g6-mw74-wfj3

Out-of-bounds write in Apple Safari

LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00748 Published 2026-03-25 Partial fix · 26.4 CWE-787

TI-2026-23059 CVE-2026-28871 · GHSA-m46v-chmw-rw9m

Cross-site scripting in Apple Safari

LOW 20

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00287 Published 2026-03-25 Partial fix · 26.4, 18.7.7 CWE-79

TI-2026-16746 CVE-2026-20691 · GHSA-rqx2-8fr2-c94c

Apple Safari: A maliciously crafted webpage may be able to fingerprint the user

LOW 20

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00287 Published 2026-03-25 Partial fix · 26.4 CWE-497

TI-2026-16692 CVE-2026-20635 · GHSA-hjj6-wmh2-qhwj

Memory corruption in Apple Safari

LOW 20

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00362 Published 2026-02-11 Partial fix · 26.3, 18.7.5 CWE-119

TI-2025-29051 CVE-2025-46299 · GHSA-29gc-r2qh-wc5v

Improper access control in Apple Safari

LOW 20

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00305 Published 2026-01-09 Partial fix · 26.2 CWE-284